ES version: 7.3.2 I am using OpenID based User Authorization, similar to this documentation, https://www.elastic.co/guide/en/elasticsearch/reference/7.4/oidc-role-mapping.html If I change any roles, the changes reflect immediately. However, when I change role-mapping of an existing user, the chang…

I spoke too soon and my answer was not correct. Apologies, let me set this straight: Both changing an existing role mapping and introducing a new role mapping could potentially trigger a clear of the respective realm cache. This is true for realms like PKI, LDAP, AD etc. Now, with SSO realms like …

Openid based user access changes is not reflecting immediately in elasticsearch

Elastic Stack Elasticsearch

soumendra (soumendra) November 26, 2019, 11:19am 5

I just hit:

POST {{es_ip_port}}/_security/realm/oidc1/_clear_cache?usernames=xyz@wxy.com

Nobody able to login to the Kibana now. It's telling unauthorized and state and nonce issue. Opened another topic thread for this. How to resolve this?

Topic		Replies	Views
Having issues mapping roles to AD users elasticsearch Elasticsearch elastic-stack-security	2	399	July 10, 2019
Map / grant roles defined in keycloak to elasticsearch Elasticsearch elastic-stack-security	6	1163	October 6, 2022
OIDC role mapping not working Elasticsearch elastic-stack-security	3	276	February 19, 2024
Kibana Role Mapping Elasticsearch elastic-stack-security	4	832	September 7, 2020
Is there API for mapping groups/users to roles Elasticsearch	4	1310	July 6, 2017

Openid based user access changes is not reflecting immediately in elasticsearch

Related Topics