# Azure sso with saml issue

**URL:** <https://forum.opensearch.org/t/azure-sso-with-saml-issue/10253>\
**Category:** OpenSearch\
**Tags:** troubleshoot\
**Created:** [July 13, 2022, 12:42pm UTC](https://forum.opensearch.org/t/azure-sso-with-saml-issue/10253 "2022-07-13T12:42:28Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Malone](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/malone/32/3588_2.png) [@Malone](https://forum.opensearch.org/u/Malone)\
**Post date:** [July 13, 2022, 1:54pm UTC](https://forum.opensearch.org/t/azure-sso-with-saml-issue/10253/2 "2022-07-13T13:54:46Z")

</div>

Hello,

I believe your issue is in `roles_key`.  
Since you are using azure app registration as IDP try add `http://schemas.microsoft.com/ws/2008/06/identity/claims/role` as values to `roles_key` and re-deploy to see if that works. Dont forget to run securityadmin.sh

The issue basically could be that no roles are fetch from the SAML assertion , if you debug the SAML request you can see what is sent from azure.

Please redeploy opensearch and opensearch-dashboards.

---

_[View the full topic](https://forum.opensearch.org/t/azure-sso-with-saml-issue/10253)._