# Securing Kibana by Authentication

**URL:** <https://discuss.elastic.co/t/securing-kibana-by-authentication/51645>\
**Category:** Kibana\
**Created:** [June 2, 2016, 6:32am UTC](https://discuss.elastic.co/t/securing-kibana-by-authentication/51645 "2016-06-02T06:32:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![thyfere](https://avatars.discourse-cdn.com/v4/letter/t/48db29/32.png) [@thyfere](https://discuss.elastic.co/u/thyfere)\
**Post date:** [June 2, 2016, 6:32am UTC](https://discuss.elastic.co/t/securing-kibana-by-authentication/51645/1 "2016-06-02T06:32:33Z")

</div>

I want to secure Kibana by asking credentials or only allowed authenticated users can access the webpage. How can I do it?

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [June 2, 2016, 2:55pm UTC](https://discuss.elastic.co/t/securing-kibana-by-authentication/51645/2 "2016-06-02T14:55:29Z")

</div>

Hi,

If you are a customer with a subscription to Elastic you should use Shield. [https://www.elastic.co/products/shield](https://www.elastic.co/products/shield)

There is a trial license if you want to try that. It gives you very flexible security with users and roles. It can be integrated with LDAP or Active directory systems.

If you are not a customer, I think you could put a proxy in front of Kibana so users have to log in through that. But I think that just would give you authentication and not authorization (no roles for different users).

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:51pm UTC](https://discuss.elastic.co/t/securing-kibana-by-authentication/51645/3 "2017-07-06T13:51:46Z")

</div>


