# Azure AD with groups in kibana and role mappings

**URL:** <https://discuss.elastic.co/t/azure-ad-with-groups-in-kibana-and-role-mappings/313688>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [September 5, 2022, 1:27pm UTC](https://discuss.elastic.co/t/azure-ad-with-groups-in-kibana-and-role-mappings/313688 "2022-09-05T13:27:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vinvli](https://avatars.discourse-cdn.com/v4/letter/v/9dc877/32.png) [@vinvli](https://discuss.elastic.co/u/vinvli)\
**Post date:** [September 5, 2022, 1:27pm UTC](https://discuss.elastic.co/t/azure-ad-with-groups-in-kibana-and-role-mappings/313688/1 "2022-09-05T13:27:26Z")

</div>

We are currently working with Elastic cloud and Azure AD and trying to login to azure with normal AD groups. This is done via role mappings and OIDC. This seems to work fine. However once we use a native Azure AD group it doesn't seem to work anymore. Is there a difference between both? tokens maybe?

We use this guide to configure the whole thing:  
[Set up OpenID Connect with Azure, Google, or Okta | Elasticsearch Service Documentation | Elastic](https://www.elastic.co/guide/en/cloud/current/ec-securing-clusters-oidc-op.html)

---

<div class="post-metadata">

**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\
**Post date:** [September 6, 2022, 12:04am UTC](https://discuss.elastic.co/t/azure-ad-with-groups-in-kibana-and-role-mappings/313688/2 "2022-09-06T00:04:47Z")

</div>

> [@vinvli](#):
>
> it doesn't seem to work anymore

You'll need to share details about exactly how it does not work for troubleshooting. Error messages? Configurations? Different between working and non-working setup?

If you are Cloud customer and have support contract, I'd suggest you leverage that to get help from dedicated support folks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 4, 2022, 12:05am UTC](https://discuss.elastic.co/t/azure-ad-with-groups-in-kibana-and-role-mappings/313688/3 "2022-10-04T00:05:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.