# Secure Kibana Dasboard Iframes

**URL:** https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738
**Category:** Kibana
**Tags:** kql-kibana-query-language, kibana-plugin-development, dashboard
**Created:** [April 4, 2024, 5:30am UTC](https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738 "2024-04-04T05:30:55Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![kishorkumar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kishorkumar/32/132930_2.png) [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)
#### Post date: [April 4, 2024, 5:30am UTC](https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738/1 "2024-04-04T05:30:55Z")

</div>

Hello @elastic #stack-kibana #dev-kibana.

We aim to create a restricted iframe that cannot be exploit it is also public iframe url but is only accessible by specific userIds. We intend to embed this iframe in our app. How can we ensure its privacy? Additionally, we want to prevent anyone from determining the iframe's existence to prevent potential exploitation.

so how do it , if you have any guide then lets know. can we restrict the traffic or get request on public iframe link of dashboard to must contain the userID

---

<div class="post-metadata">

### Author: ![jsanz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/32/53734_2.png) [@jsanz](https://discuss.elastic.co/u/jsanz)
#### Post date: [April 30, 2024, 11:20am UTC](https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738/2 "2024-04-30T11:20:44Z")

</div>

There is an excellent post on the Elastic blog on different things you can do to embed Kibana in an iFrame

> **[How to embed Kibana dashboards](https://www.elastic.co/blog/how-to-embed-kibana-dashboards)**
>
> Have you ever wanted to embed your favorite Kibana dashboard in a web application? Join Carly Richmond as she shows you how in her latest blog....

However, I don't think there's a way to achieve the requirements you mentioned

- No way to "hide" you are using an iframe, at the end of the day, they will parse your HTML and offer that to the users (and potentially anyone to inspect it)
- No way to log into Kibana using url parameters. You can set up Single Sign On to authenticate your users, though. Details [here](https://www.elastic.co/guide/en/kibana/current/kibana-authentication.html#embedded-content-authentication)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 28, 2024, 11:21am UTC](https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738/3 "2024-05-28T11:21:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
