- Newest
- Most votes
- Most comments
When using Amazon OpenSearch Service with IAM Identity Center authentication, the login selector screen is part of the standard authentication flow. Currently, there isn't a documented way to completely bypass this screen or set IAM Identity Center as the default authentication method.
The authentication options shown on this screen are determined by the authentication methods configured for your OpenSearch domain. While you can't hide this screen entirely, you might consider these approaches:
-
If you're exclusively using IAM Identity Center for authentication, you could consider disabling other authentication methods on your domain to potentially simplify the login experience.
-
For a custom implementation, you might explore setting up a proxy server in front of your OpenSearch Dashboards that could handle the authentication flow and automatically select the IAM Identity Center option.
-
You could provide clear instructions to your users that they need to select "IAM Identity Center" each time their session expires.
The session timeout for OpenSearch Dashboards can be configured in the opensearch_dashboards.yml file, where you can adjust settings like opensearch_security.cookie.ttl and opensearch_security.session.ttl (both default to 3600000 milliseconds or 1 hour). Extending these values might reduce how often users encounter the login screen.
Sources
Getting started with the OpenSearch user interface in Amazon OpenSearch Service - Amazon OpenSearch Service
IAM Identity Center Trusted Identity Propagation Support for OpenSearch - Amazon OpenSearch Service
Using OpenSearch Dashboards with Amazon OpenSearch Service - Amazon OpenSearch Service
answered 9 months ago
Relevant content
asked 4 years ago
asked 2 years ago

This was not helpful. It talks mostly about OpenSearch Dashboards as part of a domain or serverless domain, and not the "OpenSearch UI" product