# SAML configuration in a Elasticsearch cluster

**URL:** <https://discuss.elastic.co/t/saml-configuration-in-a-elasticsearch-cluster/151858>\
**Category:** Elasticsearch\
**Created:** [October 10, 2018, 1:50pm UTC](https://discuss.elastic.co/t/saml-configuration-in-a-elasticsearch-cluster/151858 "2018-10-10T13:50:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![talon](https://avatars.discourse-cdn.com/v4/letter/t/c77e96/32.png) [@talon](https://discuss.elastic.co/u/talon)\
**Post date:** [October 10, 2018, 1:50pm UTC](https://discuss.elastic.co/t/saml-configuration-in-a-elasticsearch-cluster/151858/1 "2018-10-10T13:50:39Z")

</div>

Hi  
I have a question, i have enable SAML in my Elasticsearch cluster.  
and i enable SAML in each node, that is i write the SAML configuration in each node's elasticsearch.yml.

I want to ask if this is necessary, or i just need to config the [Tribe node](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-tribe.html)  
no need enable the [Master-eligible node](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#master-node) and [Data node](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#data-node) and [Ingest node](https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html).

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [October 10, 2018, 4:45pm UTC](https://discuss.elastic.co/t/saml-configuration-in-a-elasticsearch-cluster/151858/2 "2018-10-10T16:45:52Z")

</div>

We recommend configuring the realm on all nodes in case one node becomes unavailable, you can point Kibana to a different node easily.

---

<div class="post-metadata">

**Author:** ![talon](https://avatars.discourse-cdn.com/v4/letter/t/c77e96/32.png) [@talon](https://discuss.elastic.co/u/talon)\
**Post date:** [October 11, 2018, 12:41am UTC](https://discuss.elastic.co/t/saml-configuration-in-a-elasticsearch-cluster/151858/3 "2018-10-11T00:41:35Z")

</div>

but through this [reference](https://www.elastic.co/guide/en/kibana/current/production.html)  
we can install kibana and elasticsearch(Tribe node) in the same node, and configure Kibana point to the local client node.  
Q1.In my understanding the kibana just need to communicate with Tribe node, so other nodes don't need to configure realm. is my understanding right?  
Q2. in our cluster, we have 8 node for elasticsearch, and 2 nodes for kibaba, 3 nodes for logstash, can you give us some advice about how to manage the elasticsearch node, how many for master? how many for data. how many for ingest...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 8, 2018, 12:41am UTC](https://discuss.elastic.co/t/saml-configuration-in-a-elasticsearch-cluster/151858/4 "2018-11-08T00:41:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.