# Keycloak OIDC authentication with basic license **URL:** \ **Category:** Elasticsearch\ **Created:** [June 26, 2024, 12:37am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055 "2024-06-26T00:37:06Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![trwillis](https://avatars.discourse-cdn.com/v4/letter/t/9fc348/32.png) [@trwillis](https://discuss.elastic.co/u/trwillis)\ **Post date:** [June 26, 2024, 12:37am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/1 "2024-06-26T00:37:06Z")
Can I implement OIDC integration via Keycloak with the Elasticsearch basic license or do I need enterprise? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [June 26, 2024, 1:40am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/2 "2024-06-26T01:40:53Z")
Hi @trwillis Platinum License. OIDC falls in SSO / SAML Feature See subscription page > **[Subscriptions | Elastic Stack Products & Support | Elastic](https://www.elastic.co/subscriptions)** > > See subscription levels, pricing, and tiered features for on-prem deployments of the Elastic Stack (Elasticsearch Kibana, Beats, and Logstash), Elastic Cloud, and Elastic Cloud Enterprise.... ---
**Author:** ![trwillis](https://avatars.discourse-cdn.com/v4/letter/t/9fc348/32.png) [@trwillis](https://discuss.elastic.co/u/trwillis)\ **Post date:** [June 26, 2024, 2:15am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/3 "2024-06-26T02:15:58Z")
Thank you @stephenb ---
**Author:** ![Hadj\_Hassine\_Younes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hadj_hassine_younes/32/136002_2.png) [@Hadj\_Hassine\_Younes](https://discuss.elastic.co/u/Hadj_Hassine_Younes)\ **Post date:** [August 20, 2024, 9:05am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/4 "2024-08-20T09:05:56Z")
Hello @stephenb , is there a realease ( the 8.X series) that is not requiring a license to integrate keycloak with elasticsearch? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [August 20, 2024, 9:07am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/5 "2024-08-20T09:07:10Z")
No, this has always been a commercial feature that require a commercial license. ---
**Author:** ![Hadj\_Hassine\_Younes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hadj_hassine_younes/32/136002_2.png) [@Hadj\_Hassine\_Younes](https://discuss.elastic.co/u/Hadj_Hassine_Younes)\ **Post date:** [August 22, 2024, 7:03pm UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/6 "2024-08-22T19:03:53Z")
@Christian_Dahlqvist@stephenb is there a solution to integrate keycloak to authenticate to elasticsearch managed by eck operator , what about using a reverse proxy ? maybe kong or nginx. i did it with kong but i usually get the login page of kibana . what solution you find to bypass this issue @trwillis ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [August 22, 2024, 8:02pm UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/7 "2024-08-22T20:02:47Z")
With the basic license you can only use the native authentication realm, it is not possible to integrate with Keycloak. If you want to try to use a reverse proxy in front of Kibana is up to you, but this is not docummented nor supported as it is a third-party tool. ---
**Author:** ![Hadj\_Hassine\_Younes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hadj_hassine_younes/32/136002_2.png) [@Hadj\_Hassine\_Younes](https://discuss.elastic.co/u/Hadj_Hassine_Younes)\ **Post date:** [August 22, 2024, 8:22pm UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/8 "2024-08-22T20:22:55Z")
@leandrojmp , thanks for your response . I used the third party rproxy , but i already see the login page of kibana , the process of getting token from keycloak and validation by kong is working well , but i still seeing the login page of kibana. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [August 23, 2024, 6:24am UTC](https://discuss.elastic.co/t/keycloak-oidc-authentication-with-basic-license/362055/9 "2024-08-23T06:24:34Z")
If you have set up Elasticsearch and Kibana with standard security you will need to log in and provide a password. Not sure separate authentication in a proxy can override that as there might not be a way for the proxy to provide the appropriate credentials to Kibana and avoid the login screen. You could off course set up Elasticsearch without internal security and rely on the proxy, which would remove the login screen, but then you can not restrict what users can do. As Leandro mentioned this is not a supported setup, so I am not sure it is even possible.