# LDAP/AD auth for ECE **URL:** \ **Category:** Elastic Cloud Enterprise (ECE)\ **Tags:** elastic-stack-security\ **Created:** [November 28, 2018, 8:21am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498 "2018-11-28T08:21:11Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 28, 2018, 8:21am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/1 "2018-11-28T08:21:11Z")
Hi Is there any docs regarding setting up LDAP or AD for elasticsearch cloud enterprise. Regards Chad ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [November 28, 2018, 8:45am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/2 "2018-11-28T08:45:14Z")
Hi, Are you looking for [this](https://www.elastic.co/guide/en/cloud-enterprise/current/ece-securing-clusters-LDAP.html) ? ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 28, 2018, 8:55am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/3 "2018-11-28T08:55:04Z")
Thanks Ioannis, I found that document yes just thought I would get a expert opinion as well ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 28, 2018, 9:11am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/4 "2018-11-28T09:11:41Z")
Do I create a plugin? ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [November 28, 2018, 9:15am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/5 "2018-11-28T09:15:12Z")
> [@cwitbooi](#): > > Do I create a plugin? Apologies, but I'm not sure what you mean. ECE supports LDAP for authentication. Did you go through the documentation? Is there something that is not clear or a specific step that you have issues with? ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 28, 2018, 10:00am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/6 "2018-11-28T10:00:34Z")
never mind that question I just didn't know how to get started...Will I be able to enable xpack security with the trail version of ece? Regards Chad ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 28, 2018, 10:06am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/7 "2018-11-28T10:06:06Z")
I just want to test LDAP/AD configuration ---
**Author:** ![Alex\_Piggott](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_piggott/32/11053_2.png) [@Alex\_Piggott](https://discuss.elastic.co/u/Alex_Piggott)\ **Post date:** [November 28, 2018, 1:52pm UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/8 "2018-11-28T13:52:53Z")
Hi @cwitbooi > never mind that question I just didn't know how to get started...Will I be able to enable xpack security with the trail version of ece? Yes, the trial version is fully functional, just follow the instructions in the link @ikakavas posted, and create a thread here if you run into issues. (The main annoyance currently is that if you want to test certification you need to host the cert bundle on a web server that the ECE install can see - otherwise it's quite straightforward) Alex ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 29, 2018, 6:37am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/9 "2018-11-29T06:37:14Z")
Awesome thanks Alex...I ran into some issues yesterday will recreate and post here. I kind of figured that I need to host it in a webserver seeing that it needs a URL ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 29, 2018, 6:56am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/10 "2018-11-29T06:56:40Z")
![50](https://us1.discourse-cdn.com/elastic/original/3X/4/c/4c23163a8b0c2d4b17cfe58ee7501ad2f9893c14.png) ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [November 29, 2018, 6:57am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/11 "2018-11-29T06:57:17Z")
Thats the message I get when I try to enable security xpack ---
**Author:** ![cwitbooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwitbooi/32/38170_2.png) [@cwitbooi](https://discuss.elastic.co/u/cwitbooi)\ **Post date:** [December 5, 2018, 8:08am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/12 "2018-12-05T08:08:07Z")
Okay I am trying to setup SAML auth in Kibana and Elastic bare in mind its Elasticsearch Cloud Enterprise (ECE), it is a SSO using keycloak ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [December 5, 2018, 10:34am UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/13 "2018-12-05T10:34:21Z")
> [@cwitbooi](#): > > Okay I am trying to setup SAML auth in Kibana and Elastic bare in mind its Elasticsearch Cloud Enterprise (ECE), it is a SSO using keycloak Hi, is there a question? Do you have any specific issue that you need assistance with ? ---
**Author:** ![Alex\_Piggott](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_piggott/32/11053_2.png) [@Alex\_Piggott](https://discuss.elastic.co/u/Alex_Piggott)\ **Post date:** [December 5, 2018, 12:37pm UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/14 "2018-12-05T12:37:11Z")
> [@cwitbooi](#): > > Thats the message I get when I try to enable security xpack For some reason I thought I'd responded to this, apologies Xpack is always enabled in ECE, it won't let you turn it off hence the error message, you don't need to set it ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 19, 2018, 12:37pm UTC](https://discuss.elastic.co/t/ldap-ad-auth-for-ece/158498/15 "2018-12-19T12:37:18Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.