# Kibana authentication

**URL:** <https://discuss.elastic.co/t/kibana-authentication/257824>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [December 7, 2020, 9:42am UTC](https://discuss.elastic.co/t/kibana-authentication/257824 "2020-12-07T09:42:26Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![humartinez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/humartinez/32/46395_2.png) [@humartinez](https://discuss.elastic.co/u/humartinez)\
**Post date:** [December 7, 2020, 9:42am UTC](https://discuss.elastic.co/t/kibana-authentication/257824/1 "2020-12-07T09:42:26Z")

</div>

Hi all,  
Lets say I want to use authentication with kibana but I don't want to encript or authenticate my elasticsearch cluster. How cant I do that?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 7, 2020, 11:42am UTC](https://discuss.elastic.co/t/kibana-authentication/257824/2 "2020-12-07T11:42:37Z")

</div>

I don't think you can as it would mean a big security issue having your password transiting in clear text between the machines.

But you can add a nginx reverse proxy may be on top of Kibana.

Why not using the good practices and secure correctly your cluster?

---

<div class="post-metadata">

**Author:** ![humartinez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/humartinez/32/46395_2.png) [@humartinez](https://discuss.elastic.co/u/humartinez)\
**Post date:** [December 7, 2020, 1:44pm UTC](https://discuss.elastic.co/t/kibana-authentication/257824/3 "2020-12-07T13:44:11Z")

</div>

I mean I would like to use authentication in Kibana with tls and so, but by now I do not want to use authentication in elastic. I want to just secure the presentation layer

Is that posible?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 7, 2020, 3:00pm UTC](https://discuss.elastic.co/t/kibana-authentication/257824/4 "2020-12-07T15:00:20Z")

</div>

I think it is possible.

> **[Setting up TLS on a cluster | Elasticsearch Reference \[7.10\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/ssl-tls.html)**

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 9, 2020, 12:56am UTC](https://discuss.elastic.co/t/kibana-authentication/257824/5 "2020-12-09T00:56:57Z")

</div>

> [@humartinez](#):
>
> Is that posible?

You can place a proxy in front of Kibana to handle authentication. If that is all you want, then it's a pretty easy option.

Alternatively you could enable security on Elasticsearch and also enable anonymous access.

However, the idea that you want security in Kibana, but you want all your data in Elasticsearch to be wide open seems utterly bizarre.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 6, 2021, 12:57am UTC](https://discuss.elastic.co/t/kibana-authentication/257824/6 "2021-01-06T00:57:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.