How to set up the initial jwkset_path in an OpenID Connection in Elasticsearch

[Yungyoung_Ok (ooyy)]

I try to implement SSO function using OpenID Connect(using google api).

So I add configuration in elasticsearch.yml by referring to the URL below.

https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-guide-authentication.html#oidc-claims-mapping

There is an entry 'op.jwkset_path' during setup.
(op.jwkset_path: oidc/jwkset.json)
These settings are known as jwt storage paths issued by op.
when I first start ElasticSearch, I don't have that file.
Therefore, 'Nosuchfile' errors continue to occur when starting elasticsearch.
what should I do with the setup?

[ikakavas (Ioannis Kakavas)]

You need to

• Either download that file from your OP(google): the JWKS is referenced in https://accounts.google.com/.well-known/openid-configuration and is https://www.googleapis.com/oauth2/v3/certs . So download and save this locally before you start elasticsearch
• Or point elasticsearch to the url op.jwkset_path: https://www.googleapis.com/oauth2/v3/certs and we will handle fetching it for you.

[Yungyoung_Ok (ooyy)]

thanks!!!