Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OS: 2.14.0 I can’t seem to manage to tie correctly OpenSearch - SAML - Keycloak. I’m currently getting a few 401 responses when trying to use the button to login with SAML. My OpenSearch service is active through a virtual machine set…

I remembered i have some logs from OpenSearch in my terminal aswell. [2024-08-19T14:47:17,810][INFO ][o.o.s.m.r.i.AbstractReloadingMetadataResolver] [os0.devenv.dev] Metadata Resolver SamlHTTPMetadataResolver com.amazon.dlic.auth.http.saml.HTTPSamlAuthenticator_29: Next refresh cycle for metadata p…

Hey @RayleighSDK Look like a connection issue. Error retrieving metadata from http://localhost:8080/realms/os/protocol/saml perhaps try something that can reach of the network , IP Address or FQDN instead of localhost. I had issues awhile back, maybe this might help. [image] Er…

Hi @Gsmitt @RayleighSDK This is my working config. saml_auth: order: 1 description: "SAML provider" http_enabled: true transport_enabled: false http_authenticator: type: "saml" challenge: true config: idp: …

is ‘exchange_key’ mandatory? At the moment i had to make some changes. First of all i configured Keycloak on its own virtual machine, with valid certificates, with ansible. Now i just have to make the connection between the 2 machines happen. The configuration itself shouldn’t be that different. s…

[image] RayleighSDK: metadata_url: https://keycloak-vm:8443/realms/my-realm/protocol/saml/descriptor Could you try downloading the metadata descriptor file( https://keycloak-vm:8443/realms/my-realm/protocol/saml/descriptor ) from Keycloak and replacing metadata_url with metadata_f…

@RayleighSDK I get HTTP 500 when the exchange key is missing. SAML SAML

As soon as i get in the office i will try using the metadata_file tag, but i’m not quite sure that will change everything. The certificates i’m working with were provided to me by the firm where i work, and they were signed the same way as the other certificates for the other services. The version …

At the moment i can’t even start my OpenSearch service because of the cluster issue i mentioned. In my configuration file for ansible, there’s a task that checks that the cluster status is either yellow or green. It authenticates to _cluster/health using the admin details and password, and it gets …

I managed to start OpenSearch and OpenSearch Dashboards. My configuration: authc: basic_internal_auth_domain: description: "Authenticate via HTTP Basic against internal users database" http_enabled: True transport_enabled: True order: 0 http_authentica…

@RayleighSDK Did you update the security config with securityadmin.sh script when you’ve changed to metadata_fle? Could you run the below command to confirm that new config is there? curl --insecure -u admin:<password> https://<OpenSearch_FQDN_or_IP>:9200/_plugins/_security/api/securityconfig?pret…

Configuration for SAML login in OpenSearch with Keycloak

Security

johannes_s February 7, 2025, 9:00am 23

@pablo Thanks I did: Configure SSO with SAML on Keycloak for Opensearch

Topic		Replies	Views
Configure SSO with SAML on Keycloak for Opensearch Security troubleshoot , configure	14	913	September 4, 2025
Failing to configure SAML between OpenSearch and Keycloak Security configure	8	1771	February 28, 2023
Opensearch 3.2.0 configure SSO with SAML on Keycloak Security	10	376	September 8, 2025
OpenSearch interconnection in SAML with KeyCloak does not work OpenSearch troubleshoot	5	139	October 23, 2024
Opensearch/opensearch-dashboard Failed to get saml header: Error: Error: failed parsing SAML config Security troubleshoot	16	3305	July 27, 2022

Configuration for SAML login in OpenSearch with Keycloak

Related topics