2024-05-07 –, Moskau
Configuring authentication and authorization for an OpenSearch cluster is often named as one of the bigger challenges in setup. However, by keeping a few key points in mind, you can avoid many issues and make the configuration process less stressful. We will walk through the important aspects.
Getting your cluster properly secured is an essential part of moving it into production. If you have only one or two users and are not using OpenSearch Dashboards, it is likely a straightforward task. However with a larger user base - with different authorization levels - things can get more challenging, especially if OpenSearch Dashboards is involved. Integrating OpenSearch into an SSO environment further complicates matters.
This has a number of reasons: First, OpenSearch security offers a number of features to simplify your configuration. But sometimes, these features are not too obvious. Second, there are some configuration choices which can actually make your life more difficult than necessary. And finally, it can be non-obvious to test the configuration and find out about the reasons for issues.
In our presentation, we will cover:
- Good ways to assign privileges to users
- Getting a smooth OpenSearch Dashboards experience
- Things to keep in mind when defining complex authentication configurations, especially involving SSO
- Strategies to test configuration and diagnose issues
Freelance software architect with long track record in security and infrastructure software. Interested in finding optimal solutions which combine broad functionality with a user-centric view. Track record of many years in security software via collaborations with Search Guard and Eliatra.