opensearch-project / opensearch-devops

:smile: We welcome all the community members to help develop third party tools/automations/workflows for OpenSearch/OpenSearch-Dashboards.
https://opensearch.org/
Apache License 2.0
45 stars 36 forks source link

[BUG]The ECS task or the Opensearch dashboards' docker-compose.yml file doesn't recognize SAML configs #135

Open madhankb opened 11 months ago

madhankb commented 11 months ago

Describe the bug When connecting a standalone OpenSearch dashboards with the SAML authenticated managed service domain, the SAML configurations are not accepted in the ECS task or in the docker-compose.yml file.

To Reproduce Steps to reproduce the behavior:

  1. Create a OpenSearch dashboards ECS task or docker-compose.yml file like below
    version: '3'
    services:
    opensearch-dashboards:
    image: opensearchproject/opensearch-dashboards:2.5.0
    container_name: opensearch-dashboards
    ports:
      - 5601:5601
    expose:
      - "5601"
    environment:
      opensearch.hosts: '["https://vpc-saml-2-3cue34.ap-south-1.es.amazonaws.com"]'
      opensearch.username: 'xxx'
      opensearch.password: 'xxxx'
      opensearch_security.auth.type: "saml"
      server.xsrf.allowlist: ["/_opendistro/_security/saml/acs"]
    networks:
      - opensearch-net
    networks:
    opensearch-net:

Expected behavior When the standalone OSD endpoint is hit, it has to go to SAML application instead it goes to the dashboards home page and requires the customer to enter basic http username and password.

prudhvigodithi commented 11 months ago

[Untriage] Hey @madhankb please check and try with the following examples for connecting OSD with SAML https://opensearch.org/docs/latest/security/configuration/multi-auth/ https://opensearch.org/docs/latest/security/authentication-backends/saml/ https://opster.com/guides/opensearch/opensearch-security/how-to-set-up-single-sign-on-using-openid-connect/ https://www.youtube.com/watch?v=liJO_jOiIF8

madhankb commented 8 months ago

I have tried all and it is not working!

madhankb commented 8 months ago

Can we triage this and get this fixed please?