Custom Authorization Plugins

I'm currently working to integrate Kibana as part of our ELK stack for OpenShift and need to be able to pass a user's token to Kibana for it's subsequent use when making queries to ElastiSearch. Is there any functionality that would support this use case or could someone advise where to being in order to write the appropriate plugin?

Shield is going to add support for custom realms in a future release, which would allow you to support custom SSO frameworks.