How to Configure Keycloak as an IDP for OpenSearch?

[rameshar16]

Hi everyone,

I'm looking to integrate Keycloak as an Identity Provider (IDP) for OpenSearch. Could anyone provide any reference guide or share their experience on how to set this up? Specifically, I'm interested in:

Setting up Keycloak and creating a client for OpenSearch.
Configuring OpenSearch to use Keycloak for authentication (SAML or OpenID Connect).
Mapping Keycloak roles to OpenSearch roles.
Any prerequisites or common pitfalls to avoid.
Any help or resources would be greatly appreciated!

Thanks in advance!

[arshashi]

These links might help you to get through. We have enabled Azure AD following the instructions.

https://medium.com/@alexandrumarius/opensearch-single-sign-on-using-azure-ad-openid-saml-0a27d84d969f
https://opster.com/guides/opensearch/opensearch-security/how-to-set-up-single-sign-on-using-active-directory-in-opensearch/