SSO Using OpenID Connect

Elastic Stack Kibana
1

I am currently conducting the sso test.

User authentication has all been successful.
However 403 error occurs.

What settings should I add?

ERROR:
{"statusCode":403,"error":"Forbidden","message":"Forbidden"}

ES LOG:
[2020-03-06T12:51:57,553][TRACE][o.e.x.s.a.o.OpenIdConnectAuthenticator] [DESKTOP-O6EUAL0] OpenID Connect Provider redirected user to [/api/security/v1/oidc?state=&code=~&scope=openid&authuser=0&prompt=consent]. Expected Nonce is [~~] and expected State is [~]
"access_token": "access_token_value",
"expires_in": 3599,
"scope": "openid",
"token_type": "Bearer",
"id_token": "id_token_value"
}]
[2020-03-06T12:51:57,933][TRACE][o.e.x.s.a.o.OpenIdConnectAuthenticator] [DESKTOP-O6EUAL0] Successfully exchanged code for ID Token: [value] and Access Token [value]
[2020-03-06T12:51:57,981][TRACE][o.e.x.s.a.o.OpenIdConnectAuthenticator] [DESKTOP-O6EUAL0] Received and validated the Id Token for the user: [{"at_hash":"value","aud":"value","sub":"value","azp":"value","iss":"https://accounts.google.com","exp":1583470318,"nonce":"value","iat":1583466718}]
[2020-03-06T12:51:58,325][TRACE][o.e.x.s.a.o.OpenIdConnectAuthenticator] [DESKTOP-O6EUAL0] Received UserInfo Response from OP with status [200] and content [{
"sub": "value",
"picture": "value"
}]
[2020-03-06T12:51:58,328][TRACE][o.e.x.s.a.o.OpenIdConnectAuthenticator] [DESKTOP-O6EUAL0] Successfully retrieved user information: [{"sub":"116021723082891204727","picture":"value"}]
[2020-03-06T12:52:42,021][WARN ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [DESKTOP-O6EUAL0] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/127.0.0.1:56539}
[2020-03-06T12:53:42,030][WARN ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [DESKTOP-O6EUAL0] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/0:0:0:0:0:0:0:1:56551}
[2020-03-06T12:54:42,039][WARN ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [DESKTOP-O6EUAL0] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/127.0.0.1:56563}
[2020-03-06T12:55:42,047][WARN ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [DESKTOP-O6EUAL0] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=0.0.0.0/0.0.0.0:9200, remoteAddress=/0:0:0:0:0:0:0:1:56569}

2

There is not much we can figure out from the logs, without the config.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.