I'm running a local ES cluster using basic XPack license and I'm interested in creating a custom realm, my goal being to be able to authenticate myself using my gitlab account.
My idea is to add to the kibana login page a "Sign in with Gitlab" button, then getting the Oauth flow to do the job, before being redirected to kibana with a gitlab OAuth token, that my custom grant could receive and translate to some valid authentication.
I tried to follow the guide at https://www.elastic.co/guide/en/elastic-stack-overview/current/custom-realms.html but it seems to me that it's outdated. I then checked https://github.com/elastic/elasticsearch/tree/master/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/esnative to somehow duplicate this realm and do the required changes.
- First, does this makes sense ?
- Is it doable using the Basic XPack license ?
- Is any documentation available to help me make this work ?
Thank you guys