
Amazon OpenSearch Serverless now supports SAML federation with Okta, enabling centralized identity management and granular access control for secure user authentication and authorization to OpenSearch Dashboards.


<div><p>This article provides a step-by-step guide for configuring SAML federation between Amazon OpenSearch Serverless and Okta for centralized identity management and secure access control.</p><ul><li>OpenSearch Serverless integrates with SAML-compliant identity providers like Okta for granular access control</li><li>Create Okta users, groups, and SAML application with specific ACS URL and audience URI</li><li>Configure group attribute statements in Okta to map users to OpenSearch groups</li><li>Create SAML provider in OpenSearch Serverless using Okta metadata URL</li><li>Update data access policies to grant SAML principal permissions to collections</li><li>Users authenticate via Okta credentials to access OpenSearch Dashboards securely</li></ul><p>This integration enables organizations to manage OpenSearch Serverless access through centralized identity management without maintaining separate user credentials.</p></div>


Related articles