[User Impersonation with X-Pack] action [cluster:admin/xpack/security/user/authenticate] is unauthorized for user

[Joao_Palma (João Palma)]

Hello,

I'm trying configure ELK with SSO (keycloak)..

I'm using this architecture but i got this error {"statusCode":403,"error":"Forbidden","message":"[security_exception] action [cluster:admin/xpack/security/user/authenticate] is unauthorized for user [nginx] run as [user1@mail.pt]"}

nginx have privilege run as user1 configured in a role! Can you help me?

Thanks

[lukas (Lukas Olson)]

@Brandon_Kobel or @Larry_Gregory Do you or someone on the security team have some insight here?

[Brandon_Kobel]

@Joao_Palma can you share the role definitions for the nginx user?

[Joao_Palma (João Palma)]

Hello,
The error is the SSO, he send the email in forwarded username... I fix this, using a script in LUA

Thanks to everyone