Here is my use case:
We built 4 analytics dashboards, and would like to have those 4 dashboards embedded into our site.
I have managed to get this working using anonymous accounts.
The problem we are facing is that our product offering is a Single-Tenant architecture, so each client has their own instance running.
All the analytics, across all the sites are captured into Elastic into a single index.
We want to embed the dashboards into a client's site, but they should only see their own data, so filter the data by a "ClientName" field. We managed to get that working, but the src field in the iframe contains the clientname, so a person can just potentially change to randomly and potentially see someone else's data.
What options do I have to make something like this work?
