Authenticate to Kibana without Elasticsearch?

Elastic Stack Kibana
1

Hi,
Is it possible, somehow, to login/authenticate to Kibana with an external authentication method?
So there will be no changes to the elastic node/yml and other configuration files.
For example, authenticate to an active directory system or any third-party platform.
If it is possible, how?
Thanks~!

2

The only thing I have seen would be a proxy like nginx. Why would you want this though?

3

Reason:
security reasons. using Kibana on a few different domains, but with 1 centralised elasticsearch 'data lake'. So each user/user-group will need to authenticate against a different AD. And the native realm is less preferred in this case.

Any reference?

I am trying to convince it is impossible, or very complicated and not worth the effort. :slight_smile:

4

You can use different realms with the Security functionality, why not use that?

5

It will require 2 different domains to talk with each other.
There is no trust between these domains.

6

Then define them as separate realms, per that link?

7

yes, your solution is understood.
yet, I will have to configure elastic to integrate with an external authentication system (AD/LDAP), i.e. on a different domain.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.