All authentication is performed by the backend Elasticsearch cluster, including LDAP, so you'd only be concerned with passing a Basic authentication header to Kibana for loading the iframe. There are security implications for doing something on the client. I would suggest trying something more like Auto-authenticating to iframe-embedded Kibana dashboard.