Skip to content

How do I hide the OpenSearch UI Login/selector screen?

0

I have OpenSearch UI set up with AWS IAM Identity Center SSO and it's working great. There is an annoyance whenever a user connects for the first time after their session has expired (see screenshot). This login screen is shown every time and they have to select "IAM Identity Center" each time. Is there a way I can get rid of this page and have them SSO directly into OpenSearch UI? Or at least make Identity Center the default option so they only have to do one click instead of two?

OpenSearch UI Login Screen

1 Answer
-1

When using Amazon OpenSearch Service with IAM Identity Center authentication, the login selector screen is part of the standard authentication flow. Currently, there isn't a documented way to completely bypass this screen or set IAM Identity Center as the default authentication method.

The authentication options shown on this screen are determined by the authentication methods configured for your OpenSearch domain. While you can't hide this screen entirely, you might consider these approaches:

  1. If you're exclusively using IAM Identity Center for authentication, you could consider disabling other authentication methods on your domain to potentially simplify the login experience.

  2. For a custom implementation, you might explore setting up a proxy server in front of your OpenSearch Dashboards that could handle the authentication flow and automatically select the IAM Identity Center option.

  3. You could provide clear instructions to your users that they need to select "IAM Identity Center" each time their session expires.

The session timeout for OpenSearch Dashboards can be configured in the opensearch_dashboards.yml file, where you can adjust settings like opensearch_security.cookie.ttl and opensearch_security.session.ttl (both default to 3600000 milliseconds or 1 hour). Extending these values might reduce how often users encounter the login screen.
Sources
Getting started with the OpenSearch user interface in Amazon OpenSearch Service - Amazon OpenSearch Service
IAM Identity Center Trusted Identity Propagation Support for OpenSearch - Amazon OpenSearch Service
Using OpenSearch Dashboards with Amazon OpenSearch Service - Amazon OpenSearch Service

answered 9 months ago

  • This was not helpful. It talks mostly about OpenSearch Dashboards as part of a domain or serverless domain, and not the "OpenSearch UI" product

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.