# Auto-authenticate Kibana 5.0 dashboard embedded in iframe

**URL:** https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457
**Category:** Kibana
**Created:** [December 8, 2016, 4:41pm UTC](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457 "2016-12-08T16:41:13Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Tom\_Lancaster](https://avatars.discourse-cdn.com/v4/letter/t/439d5e/32.png) [@Tom\_Lancaster](https://discuss.elastic.co/u/Tom_Lancaster)
#### Post date: [December 8, 2016, 4:41pm UTC](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457/1 "2016-12-08T16:41:13Z")

</div>

Hi, I'm taking the iframe embed from Kibana and I want to plug it into a web app. When it displays, however, it presents a login view. I've tried embedding the auth info in the url a la Basic Auth ([http://username](http://username):password@...)  
to no avail.

The iframe embed seems less useful if it requires the end user to log in to it separately.

Is my only option to remove authentication and proxy the dash through my own authenticated route?

Thanks,

Tom

---

<div class="post-metadata">

### Author: ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)
#### Post date: [December 9, 2016, 1:59am UTC](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457/2 "2016-12-09T01:59:44Z")

</div>

How is are you handling authentication with Kibana. Is it basic auth, Shield, or something else?

---

<div class="post-metadata">

### Author: ![Tom\_Lancaster](https://avatars.discourse-cdn.com/v4/letter/t/439d5e/32.png) [@Tom\_Lancaster](https://discuss.elastic.co/u/Tom_Lancaster)
#### Post date: [December 9, 2016, 3:35pm UTC](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457/3 "2016-12-09T15:35:28Z")

</div>

whatever comes with X-Pack. It's not Basic Auth, since it displays login boxes in the page.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 6, 2017, 3:35pm UTC](https://discuss.elastic.co/t/auto-authenticate-kibana-5-0-dashboard-embedded-in-iframe/68457/4 "2017-01-06T15:35:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
