# Connecting Kibana to an OpenID provider without setting up TLS

**URL:** https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450
**Category:** Kibana
**Tags:** docker
**Created:** [December 10, 2021, 5:59pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450 "2021-12-10T17:59:09Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Tom\_Cook](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tom_cook/32/98687_2.png) [@Tom\_Cook](https://discuss.elastic.co/u/Tom_Cook)
#### Post date: [December 10, 2021, 5:59pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450/1 "2021-12-10T17:59:09Z")

</div>

I've got a small Elasticsearch cluster (two nodes) running in docker along with Kibana. The only thing that's exposed outside of the docker network is the Kibana service on port 5601 - and that's only exposed to localhost, as I have a reverse proxy in front of it to provide TLS to clients.

Now I want to connect it to our OpenID provider but it seems that for that I need the elastic token service, and for that I have to configure TLS on everything in the stack. Really? What is TLS going to add here? Is there no way to enable the token service without TLS?

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [December 16, 2021, 1:38pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450/2 "2021-12-16T13:38:38Z")

</div>

Hey @Tom_Cook ,

Have you tried to set `xpack.security.authc.token.enabled: true` in `elasticearch.yml` explicitly? Does Elasticsearch still require TLS in this case?

Best,  
Oleg

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 13, 2022, 1:39pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450/3 "2022-01-13T13:39:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
