opensearch-devops icon indicating copy to clipboard operation
opensearch-devops copied to clipboard

[BUG]The ECS task or the Opensearch dashboards' docker-compose.yml file doesn't recognize SAML configs

Open madhankb opened this issue 1 year ago • 3 comments

Describe the bug When connecting a standalone OpenSearch dashboards with the SAML authenticated managed service domain, the SAML configurations are not accepted in the ECS task or in the docker-compose.yml file.

To Reproduce Steps to reproduce the behavior:

  1. Create a OpenSearch dashboards ECS task or docker-compose.yml file like below
version: '3'
services:
  opensearch-dashboards:
    image: opensearchproject/opensearch-dashboards:2.5.0
    container_name: opensearch-dashboards
    ports:
      - 5601:5601
    expose:
      - "5601"
    environment:
      opensearch.hosts: '["https://vpc-saml-2-3cue34.ap-south-1.es.amazonaws.com"]'
      opensearch.username: 'xxx'
      opensearch.password: 'xxxx'
      opensearch_security.auth.type: "saml"
      server.xsrf.allowlist: ["/_opendistro/_security/saml/acs"]
    networks:
      - opensearch-net
networks:
  opensearch-net:

Expected behavior When the standalone OSD endpoint is hit, it has to go to SAML application instead it goes to the dashboards home page and requires the customer to enter basic http username and password.

madhankb avatar Dec 08 '23 10:12 madhankb

[Untriage] Hey @madhankb please check and try with the following examples for connecting OSD with SAML https://opensearch.org/docs/latest/security/configuration/multi-auth/ https://opensearch.org/docs/latest/security/authentication-backends/saml/ https://opster.com/guides/opensearch/opensearch-security/how-to-set-up-single-sign-on-using-openid-connect/ https://www.youtube.com/watch?v=liJO_jOiIF8

prudhvigodithi avatar Dec 19 '23 21:12 prudhvigodithi

I have tried all and it is not working!

madhankb avatar Mar 20 '24 14:03 madhankb

Can we triage this and get this fixed please?

madhankb avatar Mar 20 '24 15:03 madhankb