Skip to content
This repository has been archived by the owner on Mar 30, 2023. It is now read-only.

Commit

Permalink
Update link to role mapping APIs
Browse files Browse the repository at this point in the history
  • Loading branch information
russcam committed Feb 12, 2020
1 parent 93473c4 commit 6520c48
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/azure-arm-template.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -1356,14 +1356,14 @@ Identifier (EntityID) field for the Enterprise application within AAD>>. Also pa
[[role-mappings]]
==== Role mappings

With the cluster deployed, the {elasticdocs}/security-api-role-mapping.html[Role Mapping APIs] are used to configure rules to define how roles received in the SAML token map to roles within Elasticsearch. A SAML realm called `saml_aad` is configured when `samlMetadataUri` parameter is provided, and maps the SAML role claim to the `groups` attribute.
With the cluster deployed, the {elasticdocs}/security-api-put-role-mapping.html[Role Mapping APIs] are used to configure rules to define how roles received in the SAML token map to roles within Elasticsearch. A SAML realm called `saml_aad` is configured when `samlMetadataUri` parameter is provided, and maps the SAML role claim to the `groups` attribute.

Since SAML SSO integration also configures Basic Authentication access, role mappings
can be added using the `elastic` superuser account. The role mappings that you define will vary depending on the roles that you defined in the `appRoles` array in the <<application-manifest, Enterprise Application Manifest>>, but as two examples to demonstrate

[source,sh]
----
PUT /_xpack/security/role_mapping/saml-kibana-user
PUT /_security/role_mapping/saml-kibana-user
{
"roles": [ "kibana_user" ],
"enabled": true,
Expand All @@ -1380,7 +1380,7 @@ realm, and

[source,sh]
----
PUT /_xpack/security/role_mapping/saml-superuser
PUT /_security/role_mapping/saml-superuser
{
"roles": [ "superuser" ],
"enabled": true,
Expand Down

0 comments on commit 6520c48

Please sign in to comment.