# Shield support for SSO apps/protocols

**URL:** https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [August 20, 2015, 3:08pm UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769 "2015-08-20T15:08:26Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![avibh](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@avibh](https://discuss.elastic.co/u/avibh)
#### Post date: [August 20, 2015, 3:08pm UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769/1 "2015-08-20T15:08:26Z")

</div>

Hi,  
I'm looking into integrating Shield into our ES.  
is there a plan to support SSO apps/protocols (like apache CAS, AuthO...) on Shield?  
Thanks

---

<div class="post-metadata">

### Author: ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)
#### Post date: [August 20, 2015, 5:58pm UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769/2 "2015-08-20T17:58:33Z")

</div>

Great question. We are planning to allow user-defined realms in an upcoming version of Shield. This would let you define a realm that works with your SSO system.

Hope that helps!  
Steve

---

<div class="post-metadata">

### Author: ![avibh](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@avibh](https://discuss.elastic.co/u/avibh)
#### Post date: [August 25, 2015, 12:53pm UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769/3 "2015-08-25T12:53:57Z")

</div>

does user defined realms mean i will have to write my own ES shield plugin?

---

<div class="post-metadata">

### Author: ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)
#### Post date: [August 25, 2015, 2:00pm UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769/4 "2015-08-25T14:00:47Z")

</div>

Yes, that's right. We recognize that there are many different potential authentication sources, and with SSO, there are competing standards for authentication and authorization, so we want to make sure it's possible to integrate Shield with as many as possible. Over time, we will be adding additional built-in realms to make this easier, but the first step is making it extensible.

Thanks,  
Steve

---

<div class="post-metadata">

### Author: ![avibh](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@avibh](https://discuss.elastic.co/u/avibh)
#### Post date: [August 27, 2015, 7:05am UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769/5 "2015-08-27T07:05:43Z")

</div>

makes sense, thanks Steve

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:48pm UTC](https://discuss.elastic.co/t/shield-support-for-sso-apps-protocols/27769/6 "2017-07-06T13:48:28Z")

</div>


