Shield support for SSO apps/protocols

Elastic Stack Elasticsearch
1

Hi,
I'm looking into integrating Shield into our ES.
is there a plan to support SSO apps/protocols (like apache CAS, AuthO...) on Shield?
Thanks

2

Great question. We are planning to allow user-defined realms in an upcoming version of Shield. This would let you define a realm that works with your SSO system.

Hope that helps!
Steve

3

does user defined realms mean i will have to write my own ES shield plugin?

4

Yes, that's right. We recognize that there are many different potential authentication sources, and with SSO, there are competing standards for authentication and authorization, so we want to make sure it's possible to integrate Shield with as many as possible. Over time, we will be adding additional built-in realms to make this easier, but the first step is making it extensible.

Thanks,
Steve

5

makes sense, thanks Steve