Sign-in to Kibana only with Google Account

[Louis-Clement (Louis-Clément LEROUX)]

Hi!

I followed these guides to sign-in to Kibana with a Google Account using Nginx and OAuth2_proxy:

User Impersonation with X-Pack: Integrating Third Party Auth with Kibana

[Google Oauth2 Sign-In] User impersonation alternative using OAuth2 Proxy

Hello, I wanted to share to the community a different approach to this great guide https://www.elastic.co/blog/user-impersonation-with-x-pack-integrating-third-party-auth-with-kibana. After playing a little bit with Nginx and OAuth2 Proxy I have managed to avoid the user impersonation and give the admin the chance to create accounts for each user in the organization with their associated roles. Notes: Parts of this guide are taken from the user impersonation guide (see link above) This guid…

And it works great!
But I have a question:
By theses methods I need a common password for Kibana users that I have to put in my Nginx config.
Is there a way to not use this password in Nginx config? I mean a way where Kibana users don't have a password and they can only sign-in with their Google account. So I don't need to add this common password in my Nginx config for more security.

Thank you!

[LizaD (Liza Dayoub)]

@Brandon_Kobel can you help?

[TimV (Tim Vernum)]

@Louis-Clement

I mean a way where Kibana users don't have a password and they can only sign-in with their Google account.

If you have a platinum license, our SAML integration works with Google, and we'll have news on OpenID Connection (OAuth2) in the near future.

SAML is also available on our Cloud Service if you'd prefer not to purchase your own license up front.