SAML error with ELK Stack

Elastic Stack Elasticsearch
23

I see. You still need to remove { "field": { "role": "Role.AT" } } from your role mapping,

PUT /_xpack/security/role_mapping/Role.AT
{
  "roles": [ "Role.AT"],
  "enabled": true,
  "rules": { "all": [
    { "field": { "realm.name": "saml1" } },
    { "field": { "groups": "Role.AT" } },
  ] }
}

should work fine for you.

kibana_dashboard_only_user role is not compatible with spaces in the way you try to use it. See this answer from @Brandon_Kobel explaining why and what you can do instead