# Need to bypass authentication in kibana as dashboards are embedd using iframes in custom website

**URL:** <https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539>\
**Category:** Kibana\
**Created:** [October 13, 2022, 12:59pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539 "2022-10-13T12:59:05Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![PRASHANT\_MEHTA](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prashant_mehta/32/101764_2.png) [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Post date:** [October 13, 2022, 12:59pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539/1 "2022-10-13T12:59:05Z")

</div>

Hello All,

I want to know possible ways to bypass basic authentication that is enabled in kibana.

Issue: I have custom website that has dashboards integrated using iframes.Now Issue is whenever the user logins to website everytime its asks for username and password.

As far as possible need to do this without using any reverse proxy if any possible way is there,  
In case no alternative the anyone can guide about nginx and steps to achieve desired behaviour in website.

Any help or suggestion would be helpful,In community saw mostly its done by reverse proxy-let me please know how its done.Seems common issue.Does same issue exist for upgraded versions aswell?

ELK VERSION 7.9.1,CENTOS .

Many Thanx

---

<div class="post-metadata">

**Author:** ![jsanz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/32/53734_2.png) [@jsanz](https://discuss.elastic.co/u/jsanz)\
**Post date:** [October 25, 2022, 2:41pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539/2 "2022-10-25T14:41:15Z")

</div>

[Anonymous authentication](https://www.elastic.co/guide/en/kibana/7.11/kibana-authentication.html#anonymous-authentication) for Kibana was added in 7.11. Since then you can publish dashboards and provide general access to Kibana without any login.

A good example of a Kibana open and easy to explore is [https://demo.elastic.co](https://demo.elastic.co).

I also published an example yesterday on how to publish a dashboard inside an iframe on this other discuss post

> [@Kibana Iframe Share Issue with Xframe and SameSite Cookie](https://discuss.elastic.co/t/kibana-iframe-share-issue-with-xframe-and-samesite-cookie/316824/2):
>
> The kibana yaml setting you are likely looking for is xpack.security.sameSiteCookies, more details [hele](https://www.elastic.co/guide/en/kibana/current/kibana-authentication.html#embedded-content-authentication). I've just added it to my Elastic Cloud deployment [image] And I could deploy a minimal TypeScript React application that shows an iframe of a public dashboard I have at [https://ela.st/cumbre-vieja-eruption](https://ela.st/cumbre-vieja-eruption) on this location: [https://ihbdnn.csb.app/](https://ihbdnn.csb.app/) Mind that of course one thing is allowing your iframe to load and another for Kibana to display stuff for anonymous users, skip the …

---

<div class="post-metadata">

**Author:** ![cromat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cromat/32/91656_2.png) [@cromat](https://discuss.elastic.co/u/cromat)\
**Post date:** [November 6, 2022, 3:18pm UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539/3 "2022-11-06T15:18:48Z")

</div>

If you don't want to use anonymous authentication but still want to login, let's say with your backend, I have written [whole blog post about it](https://boringtechnology1.github.io/jekyll/update/2022/11/05/secured-kibana-dashboard-with-angular-and-spring-boot.html). This can be applied on any technology regarding the ones that I have worked with.

---

<div class="post-metadata">

**Author:** ![PRASHANT\_MEHTA](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prashant_mehta/32/101764_2.png) [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Post date:** [November 7, 2022, 6:19am UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539/4 "2022-11-07T06:19:06Z")

</div>

Hello @cromat ,

Thanx for looking into this and for the blogpost link.I'd check the blogpost and try to implement.  
I'm using kibana 7.9.1 and I don't see anaonymous access functionality.This issue is still work in  
progress.Hope your post helps!

Can you plz let me know if without the use of reverse proxy- Nginx can authentication be bypassed?  
I'm using angular at frontend.

Many Thanx

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 5, 2022, 5:27am UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539/5 "2022-12-05T05:27:04Z")

</div>



---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 2, 2023, 5:27am UTC](https://discuss.elastic.co/t/need-to-bypass-authentication-in-kibana-as-dashboards-are-embedd-using-iframes-in-custom-website/316539/6 "2023-01-02T05:27:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
