[BUG] 401 unauthorized error for openID

[durgawaleajay]

Describe the bug
401 unauthorized error for openID integration (Keycloak as IdP) for Kibana with openDistro security plugin

The authentication integration works fine for the 1st time. But once we restart the kibana we are getting the 401 unauthorized error. To make kibana work we need to delete the .kibana index every time we restart kibana.

We also observed that the security_authentication cookies is not getting created after the kibana restart which could be the cause of the 401 unauthorized error.

To Reproduce

1. Integrate Kibana with openID security
2. After starting Kibana kill the Kibana service
3. Restart Kibana once again
   It will through 401 unauthorized

Plugins
opendistro_security

Additional context
Had raised a ticket in community below is the link & for work around as per comments we have downgraded the opendistro_security of elasticsearch from 1.13.1.0 to 1.13.0.0
https://discuss.opendistrocommunity.dev/t/kibana-401-unauthorized-error/6685/2

[vrozov]

@CEHENKLE Please transfer to https://github.com/opensearch-project/security-dashboards-plugin

[CEHENKLE]

Done

[Hariharan-Gandhi]

I face the same issue too with OD_VERSION 1.13.2 ES_VERSION 7.10.2

[davidlago]

Apologies for the very late reply here. As multiple new versions (include major ones) have been released since, and this issue has not popped up, I'm going to go ahead and close this as potentially solved by one of them. If that is not the case, please reopen with more details. Thanks!