Roles key warnings

Security
1

hi! im getting this warnings a lot in my opensearch logs:
2023-12-04T18:40:09.703311000Z [2023-12-04T18:40:09,702][WARN ][c.a.d.a.h.j.AbstractHTTPJwtAuthenticator] [opensearch-bd-research-coordinating-1] Failed to get roles from JWT claims with roles_key ‘roles’. Check if this key is correct and available in the JWT payload.

2023-12-04T18:40:09.806994000Z [2023-12-04T18:40:09,806][WARN ][o.o.s.h.HTTPBasicAuthenticator] [opensearch-bd-research-coordinating-1] No ‘Basic Authorization’ header, send 401 and ‘WWW-Authenticate Basic’

2023-12-04T18:40:09.807870000Z [2023-12-04T18:40:09,807][WARN ][c.a.d.a.h.j.AbstractHTTPJwtAuthenticator] [opensearch-bd-research-coordinating-1] Failed to get roles from JWT claims with roles_key ‘roles’. Check if this key is correct and available in the JWT payload.

my configuration is with saml:

image
image788×1290 99.7 KB

2

@taltsafrir What is your SAML IdP?
The error means that the security plugin can’t extract assigned roles from the incoming JWT token.

3

Okta

4

ok so I solved to problem with role key
but i’m still getting this error:
No ‘Basic Authorization’ header, send 401 and ‘WWW-Authenticate Basic’

I see it’s an open bug

do we have any solution for this?