# Allow OpenTelemetry to connect Anonymous to Elastic APM in fleet **URL:** \ **Category:** APM\ **Tags:** open-telemetry\ **Created:** [December 2, 2022, 8:49am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342 "2022-12-02T08:49:48Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Aile](https://avatars.discourse-cdn.com/v4/letter/a/cab0a1/32.png) [@Aile](https://discuss.elastic.co/u/Aile)\ **Post date:** [December 2, 2022, 8:49am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342/1 "2022-12-02T08:49:48Z")
**Kibana version** : 8.5.2 **Elasticsearch version** : 8.5.2 **APM Server version** : / **APM Agent language and version** : Open-Telemetry **Browser version** : / **Original install method (e.g. download page, yum, deb, from source, etc.) and version**: download page **Fresh install or upgraded from other version?** fresh **Is there anything special in your setup?** For example, are you using the Logstash or Kafka outputs? Are you using a load balancer in front of the APM Servers? Have you changed index pattern, generated custom templates, changed agent configuration etc. / **Description of the problem including expected versus actual behavior. Please include screenshots (if relevant)**: I'm doing a fresh install of Elastic / Kibana and APM APM is changed to "Elastic APM in Fleet" The Agents (OpenTelemetry) are configured to connect anonymous to the APM server (this can’t be changed) but somehow I can't figure out where to enable anonymous access. I did find: > **[Anonymous authentication | APM User Guide \[8.5\] | Elastic](https://www.elastic.co/guide/en/apm/guide/current/anonymous-auth.html)** But not the location of the setting, policy, .... that enables this. Can anyone point me where this needs to be configured? ---
**Author:** ![axw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/axw/32/28197_2.png) [@axw](https://discuss.elastic.co/u/axw)\ **Post date:** [December 2, 2022, 10:01am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342/2 "2022-12-02T10:01:42Z")
Welcome to the forum, @Aile! You will need to edit the APM integration policy in Fleet: [Quick start with Elastic Cloud | APM User Guide [8.11] | Elastic](https://www.elastic.co/guide/en/apm/guide/current/apm-quick-start.html#add-apm-integration) In the integration policy editor you will find a "Agent authorization" section where you can enable anonymous access and configured the allowed agents: ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/b/5b5862921c1bacddd6badad0e4735063ab43944f.png) Allowed agents is a list of agent names. For OpenTelemetry, this will be `/`. e.g. `opentelemetry/python` > The Agents (OpenTelemetry) are configured to connect anonymous to the APM server (this can’t be changed) but somehow I can't figure out where to enable anonymous access. Just checking: do you mean that it can't be changed in your particular application? In case you're unaware, it is possible to configure OpenTelemetry SDKs to auth by specifying the required HTTP Authorization header. For an example, see [OpenTelemetry integration | APM User Guide [8.11] | Elastic](https://www.elastic.co/guide/en/apm/guide/current/open-telemetry.html#instrument-apps-otel) ---
**Author:** ![Aile](https://avatars.discourse-cdn.com/v4/letter/a/cab0a1/32.png) [@Aile](https://discuss.elastic.co/u/Aile)\ **Post date:** [December 2, 2022, 10:16am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342/3 "2022-12-02T10:16:17Z")
Thanks for the reply. Is there by accident a list that states all the possible agent names? (in my case I need opentelemetry for .net, so I suppose it should be something like "opentelemetry/.net" or "opentelemetry/net") The main issue is that it are existing apps (which I don't have access to), so setting up the security settings is at the moment not possible. ---
**Author:** ![axw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/axw/32/28197_2.png) [@axw](https://discuss.elastic.co/u/axw)\ **Post date:** [December 2, 2022, 10:44am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342/4 "2022-12-02T10:44:45Z")
No, but there's a list of valid `telemetry.sdk.language` values here: [https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/resource/semantic\_conventions/README.md#telemetry-sdk](https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/resource/semantic_conventions/README.md#telemetry-sdk). So for .NET it'll be `opentelemetry/dotnet`. > The main issue is that it are existing apps (which I don't have access to), so setting up the security settings is at the moment not possible. OK. The other option is to disable auth altogether, by disabling API Key auth and clearing out the secret token. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 23, 2022, 6:45am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342/5 "2022-12-23T06:45:03Z")
This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.