See Configure Elasticsearch for OpenID Connect authentication.
See Claims mapping for OpenID Connect.