Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): Opensearch and dashboards docker 3.2.0, Keycloak - Version 26.3.2 Describe the issue: I want to setup SingleSign on to Opensearch with keycloak and SAML, however when I click on “Log in with single-sign on” browser got redirected to h…

hi @Anthony yep, demo config ruin everything working example can be found in here poc/opensearch at main · elopsod/poc poc. Contribute to elopsod/poc development by creating an account on GitHub.

Hey @noel , With your deploy did you manage to validate keycloak is running and created the user and roles you want to use when you Log in? Leeroy.

hi @Leeroy Keycloak is running fine in Docker (we confirmed it’s reachable via the admin UI). It’s deployed via Docker Compose alongside OpenSearch and OpenSearch Dashboards, and both services are on the same Docker network, so they can talk to each other We’re not creating users directly in Keyc…

@noel can you please add the entity_id to your config.yml and see if this works for you. saml_auth_domain: order: 1 http_enabled: true transport_enabled: false http_authenticator: type: saml challenge: true config: idp: …

@Anthony hi same issue and start to get error from dashboards {"type":"error","@timestamp":"2025-09-05T08:10:40Z","tags":["connection","client","error"],"pid":1,"level":" error","error":{"message":"4068A963D5790000:error:0A000416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:../dep…

@noel can you remove the TLS from this for the time being to make sure this works as expected. See my configuration below for reference. provider.tf: provider "keycloak" { url = var.keycloak_url realm = var.keycloak_realm client_id = "admin-cli" username = var.keycloak_user p…

hi @Anthony thank you for you response change my environment according to recommendation above and got same error( full env config files can be found here poc/opensearch at main · elopsod/poc poc. Contribute to elopsod/poc development by creating an account on GitHub. …

@noel This would indicate that the custom configuration that you are providing is being overwritten by demo configuration. Once the containers are up, can you connect to opensearch container and examine the content of config.yml, if the saml details are there, you can load it to security index manu…

Opensearch 3.2.0 configure SSO with SAML on Keycloak

Security

noel September 8, 2025, 3:07pm 9

hi @Anthony
yep, demo config ruin everything
working example can be found in here

Topic		Replies	Views
Configure SSO with SAML on Keycloak for Opensearch Security troubleshoot , configure	14	756	September 4, 2025
Failing to configure SAML between OpenSearch and Keycloak Security configure	8	1714	February 28, 2023
Configuration for SAML login in OpenSearch with Keycloak Security	20	1141	February 7, 2025
OpenSearch interconnection in SAML with KeyCloak does not work OpenSearch troubleshoot	5	109	October 23, 2024
Keycloak OpenID 401 Unauthorized Security	22	8069	September 21, 2022

Opensearch 3.2.0 configure SSO with SAML on Keycloak

Related topics