# On embedding Kibana Iframe to a portal, Kibana don't ask for any credentials even after Basic license enabled

**URL:** https://discuss.elastic.co/t/on-embedding-kibana-iframe-to-a-portal-kibana-dont-ask-for-any-credentials-even-after-basic-license-enabled/228647
**Category:** Kibana
**Created:** [April 18, 2020, 1:35pm UTC](https://discuss.elastic.co/t/on-embedding-kibana-iframe-to-a-portal-kibana-dont-ask-for-any-credentials-even-after-basic-license-enabled/228647 "2020-04-18T13:35:17Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [April 19, 2020, 7:44pm UTC](https://discuss.elastic.co/t/on-embedding-kibana-iframe-to-a-portal-kibana-dont-ask-for-any-credentials-even-after-basic-license-enabled/228647/2 "2020-04-19T19:44:20Z")

</div>

Hi!

This is something that is frequently posted on the forums here. A quick search might be helpful here:

[https://discuss.elastic.co/search?q=iframe+authentication](https://discuss.elastic.co/search?q=iframe+authentication)

Specifically these:

> [@](#):
>
> [Authenticating to iframe-embedded Kibana dashboard - #7 by weltenwort](https://discuss.elastic.co/t/authenticating-to-iframe-embedded-kibana-dashboard/71129/7)  
> Sorry for the delay, @rupaln and sorry for giving incomplete advice. I was able to get the Kibana server to respond with a cookie header by POSTing to /api/security/v1/login with a JSON request body of { "password": "", "username": "" } and the appropriate kbn-version: 5.1.1 header.

> [@Auto-authenticating to iframe-embedded Kibana dashboard](https://discuss.elastic.co/t/auto-authenticating-to-iframe-embedded-kibana-dashboard/46091/16):
>
> @tsullivan @Alex_Piggott @Francisca_Lima and others interested. Looks like you should use proxy\_set\_header Host $proxy\_host; instead of proxy\_set\_header Host $host; $proxy\_host takes host value from proxy\_pass directive, while $host will contain your server\_name. And apparently, Kibana from Elastic Cloud requires an original host to determine target cluster ID. Works for me without proxifying any additional X-Found-Cluster headers.

Looks like you should use proxy\_set\_header Host $proxy\_host; instead of proxy\_set\_header Host $host; $proxy\_host takes host value from proxy\_pass directive, while $host will contain your server\_name. And apparently, Kibana from Elastic Cloud requires an original host to determine target cluster ID. Works for me without proxifying any additional X-Found-Cluster headers.  
[/quote]

---

_[View the full topic](https://discuss.elastic.co/t/on-embedding-kibana-iframe-to-a-portal-kibana-dont-ask-for-any-credentials-even-after-basic-license-enabled/228647)._