Is it possible map the Roles for Azure-AD-groups

Security
,
1

I can able to map the individual mail ID, but it’s possible to map the Role for Azure-groups

2

@Bhanu What version of OS or ODFE are you currently running? Is it SAML or OpenID authentication?

1 Like
3

OpenSearch version : 1.2.4"
Authentication type : SAML

4

Hello,

Do you find solution ?
I have the same problem.
Works fine using email but not using group name ou group id.

5

@cbarbier @Bhanu I’ve set the following in Azure and config.yml.

config.yml

image

Azure

image
image810×521 21.2 KB

As a result, I’ll get the groups IDs. You can use these IDs in role binding.

image

6

Hello,

Thanks for your answer. I’ll test it as soon as possible because I’m administrator on the Opensearch side but not on the Azure side.
In fact, I’m using Opensearch AWS service so I cannot modify the config.yml file but I already find this setting on the AWS Opensearch configuration.

Best regards