# Enable SSO in Elastic Cloud

**URL:** <https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [October 29, 2020, 9:19am UTC](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661 "2020-10-29T09:19:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![antony\_kavin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/antony_kavin/32/47894_2.png) [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\
**Post date:** [October 29, 2020, 9:19am UTC](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661/1 "2020-10-29T09:19:25Z")

</div>

Hi team,

I want to enable SSO in my Kibana dashboard. I am using Elasticsearch and Kibana version 7.9.2. I am currently in the Gold Plan. I went through the elasticsearch guide and it was not clear. I have the below questions

1)Is configuring SSO free?  
2)I went through the features of the different plans like Standard,Gold,Platinum and Enterprise. I saw that there is a feature called Single sign-on (SAML, OpenID Connect, Kerberos) available in the Platinum plan. Does this mean that I can enable Single Sign on if I upgrade to the Platinum plan?  
3)Is there any documentation/videos which I can refer to, for enabling the Single Sign on?

Thanks,  
Antony.

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [October 29, 2020, 4:13pm UTC](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661/2 "2020-10-29T16:13:18Z")

</div>

Hi

Have you checked [https://www.elastic.co/pricing/](https://www.elastic.co/pricing/) It will give you a clear picture of our pricing model.

Here is the documentation/blog which will talk about it more .

> **[How to set up OpenID Connect on Elastic Cloud (with Azure, Google, Okta)](https://www.elastic.co/blog/how-to-set-up-openid-connect-on-elastic-cloud-with-azure-google-okta)**
>
> A quick walkthrough to authenticate users via Kibana using OpenID Connect on Elastic Cloud. This article covers implementation with Azure, Google, and Okta as identity providers.

There is also a note at the very bottom of this blog post (same for SAML):

```auto
 We covered how to authenticate users via Kibana using OpenID Connect and different providers (Azure, Google, and Okta). If you are looking for other authentication methods, Elasticsearch Service also supports SAML and Kerberos. Please note that OpenID Connect support is only available for Platinum and Enterprise subscriptions.

```

Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![antony\_kavin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/antony_kavin/32/47894_2.png) [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\
**Post date:** [October 30, 2020, 11:30am UTC](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661/3 "2020-10-30T11:30:09Z")

</div>

Hi Rashmi,

Thanks for the reply. The link that you shared was really helpful. I have some follow up questions:

1. I think the best option to enable SSO would be do an OpenID connect(via google). I know that this is available only in the Platinum version. I am currently a Gold member and I am ready to upgrade to Platinum. Will there by any other cost(from the google cloud console side) associated with this process?
2. I want to ensure that all the people from my organization will be able to use the Kibana dashboard in a secure way. So, I want all the people with my company domain to be able to access the dashboard. How can I set this up? Will it be possible at a global level? Or should I do it at an individual email level?
3. Is there any way to track the people who are using the dashboard?
4. How does user roles and SSO work together? If I want to ensure that only a certain group to view dashboard 'A' and another group to view dashboard 'B', can I set this up by using user roles and SSO together?

Thanks,  
Antony.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 27, 2020, 11:30am UTC](https://discuss.elastic.co/t/enable-sso-in-elastic-cloud/253661/4 "2020-11-27T11:30:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
