Briefly, this error occurs when Elasticsearch cannot retrieve user information from the Userinfo Endpoint, typically due to incorrect configuration or network issues. To resolve this, ensure that the Userinfo Endpoint URL is correctly configured in Elasticsearch. Also, check your network connectivity to the Userinfo Endpoint. If you’re using OAuth2, verify that the access token is valid and has the necessary scopes to access the Userinfo Endpoint. Lastly, check the logs for more detailed error information.
This guide will help you check for common problems that cause the log ” Failed to get claims from the Userinfo Endpoint. ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: plugin.
Log Context
Log “Failed to get claims from the Userinfo Endpoint.” class name is OpenIdConnectAuthenticator.java. We extracted the following from Elasticsearch source code for those seeking an in-depth context :
} @Override
public void failed(Exception ex) {
claimsListener.onFailure(
new ElasticsearchSecurityException("Failed to get claims from the Userinfo Endpoint."; ex)
);
} @Override
public void cancelled() {
[ratemypost]
