Openid connect roles

Search Guard
1

How can I get rid of the following message:

Failed to get roles from JWT claims with roles_key 'roles'. Check if this key is correct and available in the JWT payload.

I don’t want to use roles from openid

2

You just need to remove the roles_key setting from sg_config.completely, e.g.:

  jwt_auth_domain:
    http_enabled: true
    order: 1
    http_authenticator:
      type: jwt
      challenge: false
      config:
        signing_key: "..."
        jwt_header: "Authorization"
        roles_key: roles   <---- remove
        subject_key: username
    authentication_backend:
      type: noop
3

that did the trick, thanks!

4

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.