# Kibana - Okta integration not working

**URL:** <https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476>\
**Category:** Kibana\
**Created:** [June 4, 2018, 6:59pm UTC](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476 "2018-06-04T18:59:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ravirajaram](https://avatars.discourse-cdn.com/v4/letter/r/eb8c5e/32.png) [@ravirajaram](https://discuss.elastic.co/u/ravirajaram)\
**Post date:** [June 4, 2018, 6:59pm UTC](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476/1 "2018-06-04T18:59:27Z")

</div>

I am getting the below error while try to integrate kibana with okta for SSO:

Jun 04 18:39:20 kibana-1 docker[31268]: org.elasticsearch.ElasticsearchSecurityException: Cannot find any matching realm for [SamlPrepareAuthenticationRequest{realmName=null, assertionConsumerServiceURL=https://a1.kibana.nonprod.com:443/api/security/v1/saml}]

I followed the steps mentioned in the post: [Kibana SAML authentication issue](https://discuss.elastic.co/t/kibana-saml-authentication-issue/119420) and made sure that I have proper setting in my kibana.xml to match the acs url that I specify in the elasticsearch.yml.

snippet from kibana.xml:

public.protocol: https  
public.hostname: [a1.kibana.nonprod.com](http://a1.kibana.nonprod.com)  
public.port: 443

snippet from elasticsearch.yml

```
authc.realms.saml1:
type: saml
enabled: true
order: 2
idp.metadata.path: "/usr/share/elasticsearch/config/private/okta-nonprod.xml"
idp.entity_id: "http://www.okta.com/exk19gjjg09xxxxxxxx"
sp.entity_id: "https://a1.kibana.nonprod.com"
sp.acs: "https://a1.kibana.nonprod.com:443/api/security/v1/saml"
sp.logout: "https://a1.kibana.nonprod.com/logout"
attributes.principal: "nameid:persistent"
attributes.groups: "groups"

```

What else could cause, this type of error?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [June 5, 2018, 1:49am UTC](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476/2 "2018-06-05T01:49:41Z")

</div>

> [@ravirajaram](#):
>
> What else could cause, this type of error?

What license are you running with?  
Unfortunately you can get this exact error if your license does not allow for SAML (e.g. you are using a Gold license).  
The error message has been changed to be more explicit in the 6.3 release.

---

<div class="post-metadata">

**Author:** ![ravirajaram](https://avatars.discourse-cdn.com/v4/letter/r/eb8c5e/32.png) [@ravirajaram](https://discuss.elastic.co/u/ravirajaram)\
**Post date:** [June 5, 2018, 4:34pm UTC](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476/3 "2018-06-05T16:34:17Z")

</div>

Thanks TimV, we are using Gold licence for prod and non prod. Our dev cluster works fine, since it has trial license.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 3, 2018, 4:41pm UTC](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476/4 "2018-07-03T16:41:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.