Azure AD SAML Kibana authentication

Question

Hi,
Greetings.

I am having a requirement to use Azure AD based SAML authentication to login to Kibana(AWS managed)
for this I need to know the procedure to get the " IdP metadata file" from Azure AD to complete the Kibana SAML setup.

I am currently not aware of the procedure to generate the " IdP metadata file" in Azure AD, need some help.

We want to use Service provider (SP) initiated based approach.

Regards
Lokesh V

Answer 1

Hello Lokesh,

Thanks for reaching out.

You can download Federation Metadata XML file by accessing Federation Metadata Url in the format of https://login.microsoftonline.com/<Directory ID>/federationmetadata/2007-06/federationmetadata.xml , same url can be found from Azure AD App registration blade as shown below:

To learn more about SAML-based single sign-on, refer : https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-saml-single-sign-on

Hope this helps.

Regards,
Siva

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Please find detailed steps for Declare roles for an application, assign them to user which would be sent to application in SAML token and refer if you are setup automatic user provisioning to Kibana application if that support System for Cross-domain Identity Management (SCIM).

Hope this helps.