# ECE config SAML

**URL:** <https://discuss.elastic.co/t/ece-config-saml/232499>\
**Category:** Elastic Cloud Enterprise (ECE)\
**Tags:** elastic-stack-security\
**Created:** [May 13, 2020, 6:55pm UTC](https://discuss.elastic.co/t/ece-config-saml/232499 "2020-05-13T18:55:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![raphperrin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raphperrin/32/51129_2.png) [@raphperrin](https://discuss.elastic.co/u/raphperrin)\
**Post date:** [May 13, 2020, 6:55pm UTC](https://discuss.elastic.co/t/ece-config-saml/232499/1 "2020-05-13T18:55:13Z")

</div>

Hello

I have a ECE cluster with 2 nodes (hot, warm) and with machine learning. I activated SAML configuration on one of the nodes. It actually works but not all the time.

Do I need to add the configuration in the hot and warm and also in the machine learning?

When I add it there, the configuration update fails.

Thanks a lot, best regards  
Raphael

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [May 15, 2020, 6:14am UTC](https://discuss.elastic.co/t/ece-config-saml/232499/2 "2020-05-15T06:14:13Z")

</div>

> [@raphperrin](#):
>
> It actually works but not all the time.

It works when Kibana hits the node with the SAML configuration, and it doesn't work when it hits the nodes without the SAML Configuration.

> [@raphperrin](#):
>
> Do I need to add the configuration in the hot and warm and also in the machine learning?

Yes, we suggest that you do.

> [@raphperrin](#):
>
> When I add it there, the configuration update fails.

How and what is the actual error message ?

---

<div class="post-metadata">

**Author:** ![raphperrin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raphperrin/32/51129_2.png) [@raphperrin](https://discuss.elastic.co/u/raphperrin)\
**Post date:** [May 15, 2020, 8:32am UTC](https://discuss.elastic.co/t/ece-config-saml/232499/3 "2020-05-15T08:32:50Z")

</div>

The error is :  
[rolling-upgrade]: [no.found.constructor.steps.waiting.ServerBootloopingException: Instance is bootlooping [ElasticsearchInstance(ElasticsearchCluster(eef384363dea4c0c990f17e80fbfa77b),instance-0000000045)]]

Le ven. 15 mai 2020 à 08:24, Ioannis Kakavas via Discuss the Elastic Stack [elastic@discoursemail.com](mailto:elastic@discoursemail.com) a écrit :

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [May 15, 2020, 9:05am UTC](https://discuss.elastic.co/t/ece-config-saml/232499/4 "2020-05-15T09:05:11Z")

</div>

I can only assume that the settings you copy over are not correct or are not the same for all the nodes. The logs of the node that is bootlooping would have more information about why it is bootlooping I think. Maybe a good opportunity to get your support engineer involved to get to the bottom of this !

---

<div class="post-metadata">

**Author:** ![raphperrin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raphperrin/32/51129_2.png) [@raphperrin](https://discuss.elastic.co/u/raphperrin)\
**Post date:** [May 18, 2020, 12:28pm UTC](https://discuss.elastic.co/t/ece-config-saml/232499/5 "2020-05-18T12:28:46Z")

</div>

Hi,

I finally found out what was wrong. I didn't had the "user\_bundle" section in all Elasticsearch sections in the "Advanced settings".  
Once done, the setting were applied successfully.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 15, 2020, 12:28pm UTC](https://discuss.elastic.co/t/ece-config-saml/232499/6 "2020-06-15T12:28:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
