# Kibana with (non-basic) User Authentication

**URL:** <https://discuss.elastic.co/t/kibana-with-non-basic-user-authentication/18724>\
**Category:** Elasticsearch\
**Created:** [July 17, 2014, 6:46pm UTC](https://discuss.elastic.co/t/kibana-with-non-basic-user-authentication/18724 "2014-07-17T18:46:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stephan\_Buys](https://avatars.discourse-cdn.com/v4/letter/s/f08c70/32.png) [@Stephan\_Buys](https://discuss.elastic.co/u/Stephan_Buys)\
**Post date:** [July 17, 2014, 6:46pm UTC](https://discuss.elastic.co/t/kibana-with-non-basic-user-authentication/18724/1 "2014-07-17T18:46:22Z")

</div>

Hi all, I'm exploring options to enable user management and authentication  
for Kibana. The idea is to have a nice looking (not just basic auth)  
authentication screen for users of a web-based monitoring solution that we  
are developing (powered by Elasticsearch). We're not a big group, so I'm  
looking for lightweight solutions, and trying to stay as close to the  
standard packages.

I've come up with the following possible solutions, but would greatly  
appreciate any pointers.

1. Add authentication to a thin Django or Flask project (throw some  
bootstrap into the mix) and use it as a reverse proxy for urls. Should give  
me session management.
2. Use something like CAS ([http://www.jasig.org/cas](http://www.jasig.org/cas))
3. Use nginx with Basic Auth ☹

Cheers,  
Stephan

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/9dacffd2-e78b-4185-b04b-23f9e7d80c93%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/9dacffd2-e78b-4185-b04b-23f9e7d80c93%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 17, 2014, 11:05pm UTC](https://discuss.elastic.co/t/kibana-with-non-basic-user-authentication/18724/2 "2014-07-17T23:05:09Z")

</div>

There are a few such wrappers around that community members have written.  
Have a search through the archives here and you may get some ideas and even  
code to leverage.

Regards,  
Mark Walkom

Infrastructure Engineer  
Campaign Monitor  
email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com)  
web: [www.campaignmonitor.com](http://www.campaignmonitor.com)

On 18 July 2014 04:46, Stephan Buys [stephan.buys@gmail.com](mailto:stephan.buys@gmail.com) wrote:

> Hi all, I'm exploring options to enable user management and authentication  
> for Kibana. The idea is to have a nice looking (not just basic auth)  
> authentication screen for users of a web-based monitoring solution that we  
> are developing (powered by Elasticsearch). We're not a big group, so I'm  
> looking for lightweight solutions, and trying to stay as close to the  
> standard packages.
> 
> I've come up with the following possible solutions, but would greatly  
> appreciate any pointers.
> 
> 1. Add authentication to a thin Django or Flask project (throw some  
> bootstrap into the mix) and use it as a reverse proxy for urls. Should give  
> me session management.
> 2. Use something like CAS ([CAS | Apereo](http://www.jasig.org/cas))
> 3. Use nginx with Basic Auth ☹
> 
> Cheers,  
> Stephan
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/9dacffd2-e78b-4185-b04b-23f9e7d80c93%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/9dacffd2-e78b-4185-b04b-23f9e7d80c93%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/9dacffd2-e78b-4185-b04b-23f9e7d80c93%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/9dacffd2-e78b-4185-b04b-23f9e7d80c93%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624YcsdyPXrOZx95uJMbx5Zfndt%3D86XBcDT23JtKe0-Rq8A%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624YcsdyPXrOZx95uJMbx5Zfndt%3D86XBcDT23JtKe0-Rq8A%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:15am UTC](https://discuss.elastic.co/t/kibana-with-non-basic-user-authentication/18724/3 "2017-07-06T01:15:04Z")

</div>


