Hey @rmadoori, you can use PKI to authenticate the internal Kibana server user with Elasticsearch, but it's not possible to authenticate the actual logged in end-users with Elasticsearch, yet. We're tracking that effort here: https://github.com/elastic/kibana/issues/7341
To get the Kibana server user authenticating using PKI, you'll need to set the elasticsearch.ssl.certificate and elasticsearch.ssl.key settings in your kibana.yml.