Azure Active Directory SSO documentation wrong paths

[72nomada]

Hi team,

Some of the paths on page - https://documentation.wazuh.com/current/user-manual/user-administration/single-sign-on/azure-active-directory.html#wazuh-dashboard-configuration, are wrong and should be reviewed.
Maybe other content has to be updated as well.

@wazuh/frontend can provide the right paths and content.

[Desvelao]

There was a try to change the endpoints from _opendistro to _plugins in OpenSearch Dashboards 2.1.0, but there were some problems synchronizing the change in documentation, backend and frontend plugins of OpenSearch and OpenSearch Dashboards. As the change was not done in the backend, in the security plugin for OpenSearch Dashboards 2.2.0 and related documentation, the endpoints were reverted from the _plugins to _opendistro.

References:

• OpenSearch Dashboards security plugin 2.1.0 https:/opensearch-project/security-dashboards-plugin/blob/main/release-notes/opensearch-security-dashboards-plugin.release-notes-2.1.0.0.md
• OpenSearch Dashboards security plugin 2.2.0 https:/opensearch-project/security-dashboards-plugin/blob/main/release-notes/opensearch-security-dashboards-plugin.release-notes-2.2.0.0.md

The endpoints that should are working in the latest versions of Wazuh dashboard are:

Wazuh dashboard version	OpenSearch Dashboards version	Endpoints
4.3.x	1.2.0	_opendistro
4.4.0	2.4.1	_opendistro
4.4.1	2.6.0	_opendistro

I have checked the endpoint usage of Wazuh dashboard in production environments of 4.3.10, 4.4.0 and 4.4.1 and they are working with _opendistro endpoints.

References to the OpenSearch dashboards documentation:

• OpenSearch Dashboards 2.6.0 https://opensearch.org/docs/2.6/security/authentication-backends/saml/#opensearch-dashboards-configuration
• OpenSearch Dashboards 2.4.1 https://opensearch.org/docs/2.4/security/authentication-backends/saml/#opensearch-dashboards-configuration

So the endpoints starting with _plugins could be removed from the documentation to set in the allow endpoint list only those starting with _opendistro.

I found some threads where they want to change the endpoints to _plugins instead of _opendistro for OpenSearch Dashboards 3.0.0.

References:

• [BUG] SAML endpoint still using _opendistro instead of _plugins opensearch-project/security-dashboards-plugin#836
• Replace _opendistro route with _plugins opensearch-project/security-dashboards-plugin#895
• SAML auth uses legacy _opendistro route opensearch-project/security#2060
• Update SAML Endpoint opensearch-project/security#1936 (comment) (mention the replacement for 3.0.0)

Note in the case, we remove the _plugins from our documentation, and for future Wazuh dashboard applications based on a more recent version of OpenSearch Dashboards (3.x), according to the suggestions founds, they could change to the usage of _plugins instead.