# Auth kibana through jwt

**URL:** <https://discuss.elastic.co/t/auth-kibana-through-jwt/345384>\
**Category:** Kibana\
**Created:** [October 19, 2023, 11:47am UTC](https://discuss.elastic.co/t/auth-kibana-through-jwt/345384 "2023-10-19T11:47:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kmz161](https://avatars.discourse-cdn.com/v4/letter/k/838e76/32.png) [@kmz161](https://discuss.elastic.co/u/kmz161)\
**Post date:** [October 19, 2023, 11:47am UTC](https://discuss.elastic.co/t/auth-kibana-through-jwt/345384/1 "2023-10-19T11:47:33Z")

</div>

Hello!  
I need auth in kibana through jwt. I find [documenation](https://www.elastic.co/guide/en/elasticsearch/reference/current/jwt-auth-realm.html#jwt-realm-configuration) for elastic settings. I use id\_token, current config

```auto
xpack.security.authc.realms.jwt.jwt1:
  order: 3
  token_type: id_token
  client_authentication.type: shared_secret
  allowed_issuer: "https://issuer.example.com/jwt/"
  allowed_audiences: ["8fb85eba-979c-496c-8ae2-a57fde3f12d0"]
  allowed_signature_algorithms: [RS256,HS256]
  pkc_jwkset_path: jwt/jwkset.json
  claims.principal: sub

```

But I can't found kibana documentation. How I can use jwt for auth in kibana?

---

<div class="post-metadata">

**Author:** ![jsanz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/32/53734_2.png) [@jsanz](https://discuss.elastic.co/u/jsanz)\
**Post date:** [October 24, 2023, 2:14pm UTC](https://discuss.elastic.co/t/auth-kibana-through-jwt/345384/2 "2023-10-24T14:14:07Z")

</div>

There is no support for JWT and seems that it will never be available for end users but there's a request logged for API access

> <https://github.com/elastic/kibana/issues/164198>
>
> Elasticsearch has support for authenticating using JSON Web Tokens via their \[JW…T Realm\](https://www.elastic.co/guide/en/elasticsearch/reference/current/jwt-auth-realm.html).
> 
> While we can't support end-users logging in to Kibana via JWT, we should consider adding support for authenticating API requests.
> 
> At the moment, we have at least 1 known issue, and that is with the Alerting APIs: Alerting relies on the "Grant API Key API" to create API Keys on behalf of the rule creator, and this API does not support the JWT credential type.
> 
> 
> \`\`\`\[tasklist\]
> \### Tasks
> \- \[\] Research other Kibana features that may be problematic for JWT credentials
> \- \[\] Document any found limitations
> \- \[\] Create instructions on how users should authenticate via JWT to Kibana APIs
> \- \[\] Create automated test suites to verify JWT authentication continues to function 
> \`\`\`

Please, feel free to chime in on that issue to provide any feedback you see fit.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 21, 2023, 2:14pm UTC](https://discuss.elastic.co/t/auth-kibana-through-jwt/345384/3 "2023-11-21T14:14:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.