# Kibana jwt authentication

**URL:** <https://discuss.elastic.co/t/kibana-jwt-authentication/283122>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [September 2, 2021, 4:38am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122 "2021-09-02T04:38:45Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Divya\_Bansal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/divya_bansal/32/81564_2.png) [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Post date:** [September 2, 2021, 4:38am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/1 "2021-09-02T04:38:45Z")

</div>

is open distro a free open-source software for kibana jwt authentication? if yes, how can we achieve jwt authentication using it? . is there any other plugin that is free open source for jwt authentication of kibana?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2021, 4:49am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/2 "2021-09-02T04:49:23Z")

</div>

We do not support opendistro here, as it's a fork that aws own, you will need to ask on their forums.

---

<div class="post-metadata">

**Author:** ![Divya\_Bansal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/divya_bansal/32/81564_2.png) [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Post date:** [September 2, 2021, 5:02am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/3 "2021-09-02T05:02:20Z")

</div>

> [@Divya\_Bansal](#):
>
> authentication of kibana?

is there a way achieve jwt authentication using x-pack?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2021, 5:03am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/4 "2021-09-02T05:03:55Z")

</div>

Something like [Token-based authentication services | Elasticsearch Guide [7.14] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/token-authentication-services.html)?

---

<div class="post-metadata">

**Author:** ![Divya\_Bansal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/divya_bansal/32/81564_2.png) [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Post date:** [September 2, 2021, 5:07am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/5 "2021-09-02T05:07:24Z")

</div>

yes , I don't want to enter userid and pswrd each time of accessing kibana, and also wants user restricted permission

---

<div class="post-metadata">

**Author:** ![Divya\_Bansal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/divya_bansal/32/81564_2.png) [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Post date:** [September 3, 2021, 5:29am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/6 "2021-09-03T05:29:51Z")

</div>

@warkolm - Thanks for your response. We would like to enable security with Elasticsearch for authentication and authorisation purpose. Can you suggest any opensource plugins that we can use to enable this.

---

<div class="post-metadata">

**Author:** ![Divya\_Bansal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/divya_bansal/32/81564_2.png) [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Post date:** [September 8, 2021, 9:53am UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/7 "2021-09-08T09:53:19Z")

</div>

@warkolm please help with the above query

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 8, 2021, 10:45pm UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/8 "2021-09-08T22:45:43Z")

</div>

I don't know of anything, no.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 6, 2021, 10:45pm UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122/9 "2021-10-06T22:45:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
