Configure Open ID connect using Azure AD roles

[nityaraj06 (Nitya)]

Hi,

Is it possible to map the azure roles in kibana role mapping since my organisation does not allow azure groups to be enabled in the token response. The only possible fields seem to be username, groups, realm and dn. I want to map azure roles received to the kibana roles to grant access to different spaces.

//Nitya

[Marius_Dragomir]

Hello,
This is a pretty detailed guide on how to to set it up. If you need further clarifications, let us know here:

SSO / Azure AD setup

The Configuring SAML single-sign-on (SSO) documentation provides some general guidance and terminology to use SAML SSO with the Elastic Stack. The SAML based Single Sign-On with Elasticsearch and Azure Active Directory blog post may also be useful; it's related to configuring SAML SSO with Elastic stack deployed to Azure using the Azure Resource Manager (ARM) template, but most of the information is more general in nature. I think most of the information is still relevant, except that Azure now …

[nityaraj06 (Nitya)]

My question was more specific if we can have claims.roles setting in elasticsearch to map azure roles in role mapping file. I have followed these links to setup SSO and i'm currently stuck with the claims