Kibana integration with Active directory

Elastic Stack Kibana
1

I need to integrate MS AD with Kibana only and not with other products. After integration i will map the AD group and/or users to available x-pack roles.

Now, while going through the doc "https://www.elastic.co/guide/en/x-pack/current/active-directory-realm.html" it talks about changes in elasticsearch.yml file, Are these correct steps or we have specific doc to integrate kibana with microsoft AD?

2

Authentication is handled by Elasticsearch, so that sounds correct.

3

Thanks @Christian_Dahlqvist. so that means i can keep local id's e.g. elastic, beats_System etc for internal rest call auth. and have AD users for Kibana access?

I will run through those steps and try to complete this.

4

You can use multiple realms.

5

Thanks @Christian_Dahlqvist, so in this case there will be chance of lockout i see in documentation which is agreed.

What is the best practises in this case to define the order? let say i am using native and AD, Does this make sense to use first as native and second ad?
Also, what is the lockout period for local user's? Can i set the lockout period for local users?

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.