Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to setup multiple SAML authentication domains #906

Open
lrybak opened this issue Feb 17, 2022 · 0 comments
Open

Unable to setup multiple SAML authentication domains #906

lrybak opened this issue Feb 17, 2022 · 0 comments
Labels
bug Something isn't working triaged

Comments

@lrybak
Copy link

lrybak commented Feb 17, 2022

Describe the bug
I'm unable to setup multiple SAML authentication domains

My setup:

  • Two IDPs providers
  • One OpenSearch cluster
  • One OpenSearchDashboards instance

I would like to achieve the goal of working two (or more) IDPs towards single OpenSearch Dashboards instance.

I have configured two SAML authentication domains on opensearch (saml_auth_1, saml_auth_2).
SAML authentication is working fine with any domain having challenge set to true regardles its order number (order: 1, order: 2)

When try to authenticate with other domain having challenge set to false, SAML authentication is failing.
According to my observation SAML response is always validating domain with challenge set to true only.
Can you please help me if I am missing any configuration?
Is OpenSearch/OpenSearchDashboards supports multiple SAML authentication domains at all?

To Reproduce
Configure two IDPs and Dashboards as mentioned in the sample config files.
Setup challenge of first domain to false and true for second domain.
Authentication does not work for first domain (idp1)

Expected behavior
If authentication fail for saml_auth_1 it should verify next authentication domain saml_auth_2

Plugins

es-node-3-t opensearch-alerting                  1.2.4.0
es-node-3-t opensearch-anomaly-detection         1.2.4.0
es-node-3-t opensearch-asynchronous-search       1.2.4.0
es-node-3-t opensearch-cross-cluster-replication 1.2.4.0
es-node-3-t opensearch-index-management          1.2.4.0
es-node-3-t opensearch-job-scheduler             1.2.4.0
es-node-3-t opensearch-knn                       1.2.4.0
es-node-3-t opensearch-observability             1.2.4.0
es-node-3-t opensearch-performance-analyzer      1.2.4.0
es-node-3-t opensearch-reports-scheduler         1.2.4.0
es-node-3-t opensearch-security                  1.2.4.0
es-node-3-t opensearch-sql                       1.2.4.0
es-node-2-t opensearch-alerting                  1.2.4.0
es-node-2-t opensearch-anomaly-detection         1.2.4.0
es-node-2-t opensearch-asynchronous-search       1.2.4.0
es-node-2-t opensearch-cross-cluster-replication 1.2.4.0
es-node-2-t opensearch-index-management          1.2.4.0
es-node-2-t opensearch-job-scheduler             1.2.4.0
es-node-2-t opensearch-knn                       1.2.4.0
es-node-2-t opensearch-observability             1.2.4.0
es-node-2-t opensearch-performance-analyzer      1.2.4.0
es-node-2-t opensearch-reports-scheduler         1.2.4.0
es-node-2-t opensearch-security                  1.2.4.0
es-node-2-t opensearch-sql                       1.2.4.0
es-node-1-t opensearch-alerting                  1.2.4.0
es-node-1-t opensearch-anomaly-detection         1.2.4.0
es-node-1-t opensearch-asynchronous-search       1.2.4.0
es-node-1-t opensearch-cross-cluster-replication 1.2.4.0
es-node-1-t opensearch-index-management          1.2.4.0
es-node-1-t opensearch-job-scheduler             1.2.4.0
es-node-1-t opensearch-knn                       1.2.4.0
es-node-1-t opensearch-observability             1.2.4.0
es-node-1-t opensearch-performance-analyzer      1.2.4.0
es-node-1-t opensearch-reports-scheduler         1.2.4.0
es-node-1-t opensearch-security                  1.2.4.0
es-node-1-t opensearch-sql                       1.2.4.0

Screenshots
N/A

Host/Environment (please complete the following information):

  • opensearchproject/opensearch:1.2.4
  • opensearchproject/opensearch-dashboards:1.2.0

Additional context
opensearch_dashboards.txt
security_config.txt

@lrybak lrybak added Beta bug Something isn't working untriaged labels Feb 17, 2022
@peternied peternied removed the Beta label Apr 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working triaged
Projects
None yet
Development

No branches or pull requests

3 participants