Can JWT and OIDC authentication be used simultaneously with OpenSearch Dashboards?

OpenSearch Dashboards
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.19

Describe the issue:

Hi,

I currently have JWT authentication working with OpenSearch Dashboards, and OIDC authentication is also working independently.

I want to enable both authentication methods simultaneously in OpenSearch Dashboards.

According to the OpenSearch 2.19 documentation, Dashboards currently supports a combination of Basic Authentication, OpenID Connect, and SAML for multiple authentication options:

“As a reminder, Dashboards currently supports a combination of basic authentication, OpenID Connect, and SAML as a valid set of values.”

Does this mean the following configuration is not supported/invalid?

opensearch_security.auth.type: ["jwt", "openid"]
opensearch_security.auth.multiple_auth_enabled: true

If JWT + OIDC is not supported natively in Dashboards, what is the recommended approach for this use case?

Thanks!

2

@shubtiwa Have you tried using

opensearch_security.auth.type: ["basicauth","jwt", "openid"]
opensearch_security.auth.multiple_auth_enabled: true

According to the OpenSearch documentation, both of the configurations below are supported.

opensearch_security.auth.type: ["basicauth","jwt"]

opensearch_security.auth.type: ["basicauth","openid"]
3

Hi @pablo , sorry for late reply!

I’ve already tested the following combinations, and both worked as expected:

opensearch_security.auth.type: [“basicauth”, “jwt”]

opensearch_security.auth.type: [“basicauth”, “openid”]

However, the following combination did not work when I tried it:

opensearch_security.auth.type: [“jwt”, “openid”] opensearch_security.auth.multiple_auth_enabled: true

I also went through the documentation, but I couldn’t find ["jwt", "openid"] listed as a valid combination.

So, I just wanted to confirm whether this combination is actually supported and expected to work.

4

This configuration won’t work. As per my previous comment, try the following instead.

opensearch_security.auth.type: ["basicauth","jwt","openid"]
opensearch_security.auth.multiple_auth_enabled: true

basicauth is mandatory.
I’ve also done some testing with 2.19 and I had no issues.