# Okta and xpack "Basic" subscription limitation clarification

**URL:** <https://discuss.elastic.co/t/okta-and-xpack-basic-subscription-limitation-clarification/193167>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [July 31, 2019, 3:43pm UTC](https://discuss.elastic.co/t/okta-and-xpack-basic-subscription-limitation-clarification/193167 "2019-07-31T15:43:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mhoydis\_datto](https://avatars.discourse-cdn.com/v4/letter/m/977dab/32.png) [@mhoydis\_datto](https://discuss.elastic.co/u/mhoydis_datto)\
**Post date:** [July 31, 2019, 3:43pm UTC](https://discuss.elastic.co/t/okta-and-xpack-basic-subscription-limitation-clarification/193167/1 "2019-07-31T15:43:40Z")

</div>

If one has only the free "Basic" subscription for elasticsearch 7.x, what restrictions would they have if their userbase logs into Kibana via SAML and Okta?  
Is the limitation that all users from that realm would essentially end up as the same role? Meaning you would not be able to restrict certain users or groups from reading certain indices?  
Or would this just not work at all with a SAML/Okta login realm in the "Basic" subscription?

I guess I am seeking clarification on exactly what functionality restriction I can expect with a SAML/Okta Kibana use case and the security features of the "Basic" subscription.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 31, 2019, 6:13pm UTC](https://discuss.elastic.co/t/okta-and-xpack-basic-subscription-limitation-clarification/193167/2 "2019-07-31T18:13:07Z")

</div>

SAML is not supported as part of the basic tier so it would not work at all.

---

<div class="post-metadata">

**Author:** ![mhoydis\_datto](https://avatars.discourse-cdn.com/v4/letter/m/977dab/32.png) [@mhoydis\_datto](https://discuss.elastic.co/u/mhoydis_datto)\
**Post date:** [July 31, 2019, 6:24pm UTC](https://discuss.elastic.co/t/okta-and-xpack-basic-subscription-limitation-clarification/193167/3 "2019-07-31T18:24:26Z")

</div>

Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 28, 2019, 6:24pm UTC](https://discuss.elastic.co/t/okta-and-xpack-basic-subscription-limitation-clarification/193167/4 "2019-08-28T18:24:33Z")

</div>

Closed on August 28, 2019, 6:24pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.