opensearch-devops
opensearch-devops copied to clipboard
[BUG]The ECS task or the Opensearch dashboards' docker-compose.yml file doesn't recognize SAML configs
Describe the bug When connecting a standalone OpenSearch dashboards with the SAML authenticated managed service domain, the SAML configurations are not accepted in the ECS task or in the docker-compose.yml file.
To Reproduce Steps to reproduce the behavior:
- Create a OpenSearch dashboards ECS task or docker-compose.yml file like below
version: '3'
services:
opensearch-dashboards:
image: opensearchproject/opensearch-dashboards:2.5.0
container_name: opensearch-dashboards
ports:
- 5601:5601
expose:
- "5601"
environment:
opensearch.hosts: '["https://vpc-saml-2-3cue34.ap-south-1.es.amazonaws.com"]'
opensearch.username: 'xxx'
opensearch.password: 'xxxx'
opensearch_security.auth.type: "saml"
server.xsrf.allowlist: ["/_opendistro/_security/saml/acs"]
networks:
- opensearch-net
networks:
opensearch-net:
Expected behavior When the standalone OSD endpoint is hit, it has to go to SAML application instead it goes to the dashboards home page and requires the customer to enter basic http username and password.
[Untriage] Hey @madhankb please check and try with the following examples for connecting OSD with SAML https://opensearch.org/docs/latest/security/configuration/multi-auth/ https://opensearch.org/docs/latest/security/authentication-backends/saml/ https://opster.com/guides/opensearch/opensearch-security/how-to-set-up-single-sign-on-using-openid-connect/ https://www.youtube.com/watch?v=liJO_jOiIF8
I have tried all and it is not working!
Can we triage this and get this fixed please?