# Kibana 7.7 active directory authorization advise

**URL:** <https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866>\
**Category:** Kibana\
**Created:** [May 15, 2020, 6:13pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866 "2020-05-15T18:13:06Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![d.silwon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/d.silwon/32/65853_2.png) [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Post date:** [May 15, 2020, 6:13pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866/1 "2020-05-15T18:13:07Z")

</div>

Dears,

Is there any free of charge solution to integrate Kibana with active directory? Or should I buy paid licence min. GOLD which supports: LDAP, PKI\*, Active Directory authentication?  
My cluster configuration is next: 3 nodes of Elasticsearch with Logstash, 1 node of Kibana.

Thanks

Best Regards,  
Dan

---

<div class="post-metadata">

**Author:** ![lukeelmers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukeelmers/32/35230_2.png) [@lukeelmers](https://discuss.elastic.co/u/lukeelmers)\
**Post date:** [May 18, 2020, 1:49pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866/2 "2020-05-18T13:49:24Z")

</div>

Hi @d.silwon,

I'm not sure if there are any other Elasticsearch plugins out there that support active directory, but you are correct -- active directory integration is currently part of the [Gold subscription](https://www.elastic.co/subscriptions).

---

<div class="post-metadata">

**Author:** ![d.silwon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/d.silwon/32/65853_2.png) [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Post date:** [May 18, 2020, 2:42pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866/3 "2020-05-18T14:42:33Z")

</div>

Hi,

Someone told me about reverse proxy which should allows AD authentication to Kibana but I don't know if such solution can be used with Kibana in small company. Do you know it?

Regards,  
Daniel

---

<div class="post-metadata">

**Author:** ![lukeelmers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukeelmers/32/35230_2.png) [@lukeelmers](https://discuss.elastic.co/u/lukeelmers)\
**Post date:** [May 18, 2020, 2:51pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866/4 "2020-05-18T14:51:42Z")

</div>

> [@d.silwon](#):
>
> Someone told me about reverse proxy which should allows AD authentication to Kibana but I don't know if such solution can be used with Kibana in small company. Do you know it?

I do not know about the specific solution you're referring to, but it sounds like something that would be technically possible. For example, it's common for folks to use reverse proxies as a workaround for [anonymous auth in Kibana](https://github.com/elastic/kibana/issues/18331), and you could probably use one to handle the active directory integration too, if using the official Elastic-provided solution isn't an option.

---

<div class="post-metadata">

**Author:** ![d.silwon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/d.silwon/32/65853_2.png) [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Post date:** [May 18, 2020, 3:19pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866/5 "2020-05-18T15:19:13Z")

</div>

> [@lukeelmers](#):
>
> I do not know about the specific solution you're referring to, but it sounds like something that would be technically possible. For example, it's common for folks to use reverse proxies as a workaround for [anonymous auth in Kibana](https://github.com/elastic/kibana/issues/18331), and you could probably use one to handle the active directory integration too, if using the official Elastic-provided solution isn't an option.

Thank you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 15, 2020, 3:25pm UTC](https://discuss.elastic.co/t/kibana-7-7-active-directory-authorization-advise/232866/6 "2020-06-15T15:25:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
