ElasticSearch SAML license requirement?

[ehfdub]

Hello,

I'm looking to implement SAML single-signon in ELK stack. I've been following this guide Configuring SAML single-sign-on on the Elastic Stack | Elasticsearch Guide [7.12] | Elastic. The guide does not mention any license requirement that I see. But I could not get single sign-on to work.

After fiddling around and trying to get it to work, I found this message in the ES LOG ...

[INFO ][o.e.x.s.r.a.s.SamlBaseRestHandler] [node1] The 'saml' realm is not available under the current license

So I checked here Subscriptions | Elastic Stack Products & Support | Elastic

Can you confirm that "Single sign-on (SAML, OpenID Connect, Kerberos)" is only available in the Platinum and Enterprise versions?

Thanks,
Ehf

[stephenb (Stephen Brown)]

hi @ehfdub

Yes, that is correct.

Platinum and above
Single sign-on (SAML, OpenID Connect, Kerberos)
Include 24x7x365 Support
Critical: 1 hr, L2: 4 hrs, L3: 1 day

Gold and Above
LDAP, PKI3, Active Directory authentication
Business hrs Support
Critical: 4 hrs, L2: 1 day, L3: 2 days

Basic and above
Native, File Ream

[ehfdub]

Thanks @stephenb for the clarification