Mapping users and groups to roles
In the previous recipe, we successfully implemented SSO by delegating the user authentication process to an OpenID Connect provider, specifically Okta. During the test phase, we noticed that, despite successful authentication, access to Kibana was still restricted. This recipe aims to complete the authorization process by mapping roles to grant appropriate access.
Getting ready
To successfully implement this recipe, it’s essential to have already completed the preceding Configuring single sign-on recipe, as it provides the necessary foundation.
Another required recipe is Managing and securing access to Kibana spaces, as we will reuse the cookbook_business_reader role and its associated space.
How to do it…
Implementing role mapping is a straightforward process. There are two main approaches: through the Kibana interface or using the Stack’s API for those who prefer a programmatic approach. In this recipe, we’...
