# Kibana standard security and reverse proxy requires login multiple times

**URL:** https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404
**Category:** Kibana
**Created:** [October 11, 2021, 7:21pm UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404 "2021-10-11T19:21:02Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![mrybinski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mrybinski/32/77883_2.png) [@mrybinski](https://discuss.elastic.co/u/mrybinski)
#### Post date: [October 11, 2021, 7:21pm UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404/1 "2021-10-11T19:21:02Z")

</div>

Hello!

I'm using basic Elastic Stack version 7.15 (Elasticsearch, Kibana, Logstash, Filebeat). To access Kibana I use IIS's URL Rewrite and reverse proxy. I wanted to deal with security warning by setting up minimal security in Elasticsearch and Kibana. I got it working but the side effect of using it along with reverse proxy is that I have multiple requests to login with my AD credentials at the beginning and every time I switch context (like when I enter "Stack Management" site or "Discover" site).

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/4/0421a86c2030908336f40d18eb12e6db700b55df.png)

I have to click "Login" up to 30 times to move on (29 at the start actually).  
I've tried to go with anonymous users - it get's a little better but still have multiple login requests at the start (29 of them). I think I could use to it... but I doubt anybody else from my team could.

Do You happen to know the solution to this?

Regards,  
Marcin

---

<div class="post-metadata">

### Author: ![sebastien](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sebastien/32/36119_2.png) [@sebastien](https://discuss.elastic.co/u/sebastien)
#### Post date: [October 12, 2021, 10:47am UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404/2 "2021-10-12T10:47:26Z")

</div>

Hi @mrybinski

In order to help you with this we would need a bit more information on your setup.  
Can you share your Kibana and IIS config? Also let us know what headers your proxy sends to Kibana and what behavior exactly do you expect?

Cheers  
Sébastienj

---

<div class="post-metadata">

### Author: ![mrybinski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mrybinski/32/77883_2.png) [@mrybinski](https://discuss.elastic.co/u/mrybinski)
#### Post date: [October 13, 2021, 11:23am UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404/3 "2021-10-13T11:23:14Z")

</div>

Hi,  
Thank You for prompt reply.  
kibana.yml look like this:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/9/99f841fdeb06f7bbede5341b64a5d840a259a123.png)  
As for IIS config I'm not sure what You need so here are my URL Rewrite rules:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/4/8419a56e7623d8103fec718a1fb21a0a72d910bb.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/3/c3317a915554d0bea01bee7d0982948c7be5acf1.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/0/a0c1deb0241b14cfa92a8c855f68bda2973ca774.png)  
and I enabled Windows Authentication and added Authorization Allow Rules with Roles I'm in.

As for headers proxy sends... here I know even less what You mean but I'll try to show what I can.  
First on calling localhost:5058 (this port is redirected to 5601 with URL Rewrite) I have to clock "Login" several times and those requests keep repeating

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea9cfe1c89f41816f3b29144864df30f87d57225.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/6/16cc8d18996a6cf1e4208849ee64d687170cded9.png)  
then one of them receives OK, I then log in as Elastic user to Kibana and after displaying /app/home I got another 28 AD login requests:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/1/618da2a1af0d4e1a54740afbd8d84aaffc035076.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/b/6b54aaee4a65ff3da45cbcbdd4690504ae406ac9.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/2/f291c64a266a63c7d39130ba0ffb80ddd8db5c0b.png)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 10, 2021, 11:24am UTC](https://discuss.elastic.co/t/kibana-standard-security-and-reverse-proxy-requires-login-multiple-times/286404/4 "2021-11-10T11:24:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.