# Login failing for Kibana in iFrame due to missing sameSite cookie-setting

**URL:** <https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999>\
**Category:** Kibana\
**Created:** [March 17, 2020, 8:34pm UTC](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999 "2020-03-17T20:34:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bojanK](https://avatars.discourse-cdn.com/v4/letter/b/22d042/32.png) [@bojanK](https://discuss.elastic.co/u/bojanK)\
**Post date:** [March 17, 2020, 8:34pm UTC](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999/1 "2020-03-17T20:34:14Z")

</div>

Hello  
I'm using iFrames to integrate Kibana pages into my website. This worked well with Chrome and Firefox.  
But since Chrome changed the default cookie setting of sameSite to Lax (see [https://www.chromestatus.com/feature/5088147346030592](https://www.chromestatus.com/feature/5088147346030592)), authentication to Kibana dashboard via iFrame doesn't work anymore. The reason is that the cookie set by Kibana after authentication does not have the sameSite=None setting.

I'm using Elastic/Kibana as cloud service, hence i cannot influence the cookie settings. Is there a solution from Elastic for this?

---

<div class="post-metadata">

**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\
**Post date:** [March 18, 2020, 3:24pm UTC](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999/2 "2020-03-18T15:24:35Z")

</div>

Hey @bojanK, welcome to the discussion boards!

I'm not aware of a workaround for this at the moment, but I've opened [https://github.com/elastic/kibana/issues/60522](https://github.com/elastic/kibana/issues/60522) to track this on Kibana's side, as the issue isn't specific to the cloud service.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 15, 2020, 3:24pm UTC](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999/3 "2020-04-15T15:24:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.