Is it possible to use Xpack + an Oauth2 proxy for Kibana5? The reason for this is to keep Xpacks user roles and restrict access to index settings in the management panel, and still provide Oauth2 access.
Right now with a Oauth2 proxy, xpack needs to be disabled. One way could be to tie the anonymous user to allow password less Kibana login. This would mean instead of disabling xpack completely, there could be a provision to enable anonymous user access for Kibana, after adding the "kibana_user" role for annonymous users.