# Integrate Keycloak OIDC authentication with Elasticsearch and Kibana

**URL:** <https://discuss.elastic.co/t/integrate-keycloak-oidc-authentication-with-elasticsearch-and-kibana/381370>\
**Category:** Elasticsearch\
**Created:** [August 27, 2025, 11:01am UTC](https://discuss.elastic.co/t/integrate-keycloak-oidc-authentication-with-elasticsearch-and-kibana/381370 "2025-08-27T11:01:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![M311ow](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/m311ow/32/144802_2.png) [@M311ow](https://discuss.elastic.co/u/M311ow)\
**Post date:** [August 27, 2025, 11:01am UTC](https://discuss.elastic.co/t/integrate-keycloak-oidc-authentication-with-elasticsearch-and-kibana/381370/1 "2025-08-27T11:01:56Z")

</div>

Hi,

I’m trying to integrate Keycloak OIDC with Elasticsearch and Kibana. From what I understand, Elasticsearch has three types of nodes

1. Master node
2. Data node
3. Ingest node

If we want to set up Keycloak, on which node should the configuration be applied, and why?

br,

Mellow

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [August 29, 2025, 1:37am UTC](https://discuss.elastic.co/t/integrate-keycloak-oidc-authentication-with-elasticsearch-and-kibana/381370/2 "2025-08-29T01:37:38Z")

</div>

We recommend you apply the configuration to all nodes.

You may not need it on all nodes (it depends on your Kibana setup) but there's no harm in doing so and keeping the configuration consistent across nodes tends to be less error prone.