Populating name and email fields when using LDAP authentication

I've set up LDAP authentication using a trial license of Elasticsearch 7.1. I've got the authentication working with user-search mode, but the "full_name" and "email" attributes are null. How do I populate these with values from LDAP?

We don't map these LDAP attributes by default. You need to configure the metadata setting in the realm configuration. The necessary LDAP Attributes would be cn and mail .

Note that this will not make the full name and email viewable in Kibana when the users are logged in, but will be available in the metadata object in case you want to use them in role mappings.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.