# Configure Open ID connect using Azure AD roles **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [May 5, 2021, 6:21am UTC](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137 "2021-05-05T06:21:47Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![nityaraj06](https://avatars.discourse-cdn.com/v4/letter/n/d78d45/32.png) [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Post date:** [May 5, 2021, 6:21am UTC](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137/1 "2021-05-05T06:21:47Z")
Hi, Is it possible to map the azure roles in kibana role mapping since my organisation does not allow azure groups to be enabled in the token response. The only possible fields seem to be username, groups, realm and dn. I want to map azure roles received to the kibana roles to grant access to different spaces. //Nitya ---
**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\ **Post date:** [May 6, 2021, 11:57am UTC](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137/2 "2021-05-06T11:57:12Z")
Hello, This is a pretty detailed guide on how to to set it up. If you need further clarifications, let us know here: > [@SSO / Azure AD setup](https://discuss.elastic.co/t/sso-azure-ad-setup/230639/2): > > The [Configuring SAML single-sign-on (SSO) documentation](https://www.elastic.co/guide/en/elasticsearch/reference/7.6/saml-guide.html) provides some general guidance and terminology to use SAML SSO with the Elastic Stack. The [SAML based Single Sign-On with Elasticsearch and Azure Active Directory blog post](https://www.elastic.co/blog/saml-based-single-sign-on-with-elasticsearch-and-azure-active-directory) may also be useful; it's related to configuring SAML SSO with Elastic stack deployed to Azure using [the Azure Resource Manager (ARM) template](https://github.com/elastic/azure-marketplace), but most of the information is more general in nature. I think most of the information is still relevant, except that Azure now … ---
**Author:** ![nityaraj06](https://avatars.discourse-cdn.com/v4/letter/n/d78d45/32.png) [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Post date:** [May 6, 2021, 12:17pm UTC](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137/3 "2021-05-06T12:17:19Z")
My question was more specific if we can have claims.roles setting in elasticsearch to map azure roles in role mapping file. I have followed these links to setup SSO and i'm currently stuck with the claims ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 3, 2021, 12:17pm UTC](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137/4 "2021-06-03T12:17:43Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.