How to generate metadata from opensearch for SAML

Security
1

I am not able to find elasticsearch-saml-metadata as we have elasticsearch what is the option in opensearch

2

@rhtbansal What is your IDP?

3

azure AD is the idp which we are asked to configure

4

@rhtbansal To configure SAML authentication you’ll need to use config.idp.metadat_url and point to Metadata Url. I think in Azure it is called App Federation Metadata Url.
Alternatively, you can download that file from Azure and use config.idp.metadata_file.

The file name elasticsearch-saml-metadata refers to the metadata file that I’ve described above.

5

@pablo I was able to do config of meta data and enable SSO using SAML.

But for role_key is there a way to maps the roles at the Kibana level to Email rather than creating app roles in AD and then passing it as SAML attribute.

Without role_key I am only able to login into kibana but no data access is there.

6

@rhtbansal Yes, just map a user inside the role configuration.

image
image1093×479 27.6 KB

image
image826×325 22.6 KB

image
image972×413 21.4 KB

7

Thanks it worked… :slight_smile: