# Cookies issue while embedding kibana dashboard with iFrame **URL:** \ **Category:** Kibana\ **Created:** [November 26, 2020, 1:58pm UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777 "2020-11-26T13:58:44Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Gokul6](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gokul6/32/84049_2.png) [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Post date:** [November 26, 2020, 1:58pm UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/1 "2020-11-26T13:58:44Z")
recently i read this in github. Currently, Kibana does not set the `SameSite` attribute on its session cookie. Up until recently, this was tolerable, but Chrome recently (version `80` ) updated its default configuration to treat unset `SameSite` attributes to mean `Lax`. **This is problematic for users who embed Kibana in an iframe**. We should allow the `SameSite` setting to be configurable via `kibana.yml` , so users can choose if they want `Strict` , `Lax` , or `None`. Can anyone tell me how to configure this setting ( **xpack.security.sameSiteCookies** ) **in a proper format** in kibana.yml file, our kibana servers are running in elastic cloud. @azasypkin@wylie ---
**Author:** ![Gokul6](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gokul6/32/84049_2.png) [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Post date:** [November 26, 2020, 2:21pm UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/2 "2020-11-26T14:21:17Z")
i applied this setting **xpack.security.sameSiteCookies: None** in kibana.yml file and i am getting the following error. ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/6/163321777573fe6709cde4f2d7eb1320d2d237c7.png) ---
**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\ **Post date:** [November 30, 2020, 6:53am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/3 "2020-11-30T06:53:50Z")
> [@Gokul6](#): > > xpack.security.sameSiteCookies: None This looks correct to me, but it's only a valid setting **since 7.8.1** (and additionally 6.8.11). What version of the stack are you using? Best, Oleg ---
**Author:** ![Gokul6](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gokul6/32/84049_2.png) [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Post date:** [November 30, 2020, 12:08pm UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/4 "2020-11-30T12:08:38Z")
we are using 7.8.0 @azasypkin ---
**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\ **Post date:** [November 30, 2020, 12:20pm UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/5 "2020-11-30T12:20:44Z")
Then you'll need upgrade to 7.8.1 or newer (you can safely do this for patch releases). ---
**Author:** ![Gokul6](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gokul6/32/84049_2.png) [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Post date:** [November 30, 2020, 12:22pm UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/6 "2020-11-30T12:22:28Z")
ok @azasypkin thanks for your time and help !! 😊 ---
**Author:** ![DMinovski](https://avatars.discourse-cdn.com/v4/letter/d/5fc32e/32.png) [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Post date:** [December 25, 2020, 2:24am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/7 "2020-12-25T02:24:21Z")
Is there an option to set the parameters `xpack.security.secureCookies: true` and `xpack.security.sameSiteCookies: None` in the cloud hosted environment on [https://www.elastic.co](https://www.elastic.co)? It seems that these are still not supported there. Can the cloud environment give us access to the server, and we can set the cookie parameters there, depending on the type of server, Nginx, etc? > [@Login failing for Kibana in iFrame due to missing sameSite cookie-setting](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999): > > Hello I'm using iFrames to integrate Kibana pages into my website. This worked well with Chrome and Firefox. But since Chrome changed the default cookie setting of sameSite to Lax (see [https://www.chromestatus.com/feature/5088147346030592](https://www.chromestatus.com/feature/5088147346030592)), authentication to Kibana dashboard via iFrame doesn't work anymore. The reason is that the cookie set by Kibana after authentication does not have the sameSite=None setting. I'm using Elastic/Kibana as cloud service, hence i cannot influence the cookie set… ---
**Author:** ![Gokul6](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gokul6/32/84049_2.png) [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Post date:** [December 28, 2020, 6:24am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/8 "2020-12-28T06:24:51Z")
the solution to this issue is you should add this line/setting in your kibana.yml file **xpack.security.sameSiteCookies: None** and your **ELK stack version should be above 7.8.0** ---
**Author:** ![Gokul6](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gokul6/32/84049_2.png) [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Post date:** [December 28, 2020, 6:29am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/9 "2020-12-28T06:29:14Z")
yes you can do this in cloud hosted environment. we did the above changes in kibana.yml file on our cloud hosted environment. only admins have access to do this.below is the url [https://cloud.elastic.co/login?redirectTo=%2Fhome](https://cloud.elastic.co/login?redirectTo=%2Fhome) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 25, 2021, 6:29am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777/10 "2021-01-25T06:29:27Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.