Hi!
This is something that is frequently posted on the forums here. A quick search might be helpful here:
https://discuss.elastic.co/search?q=iframe+authentication
Specifically these:
Looks like you should use proxy_set_header Host $proxy_host; instead of proxy_set_header Host $host; $proxy_host takes host value from proxy_pass directive, while $host will contain your server_name. And apparently, Kibana from Elastic Cloud requires an original host to determine target cluster ID. Works for me without proxifying any additional X-Found-Cluster headers.
[/quote]