# Support for OpenId Connect?

**URL:** <https://discuss.elastic.co/t/support-for-openid-connect/197127>\
**Category:** Elastic Search\
**Tags:** elastic-app-search\
**Created:** [August 28, 2019, 1:40pm UTC](https://discuss.elastic.co/t/support-for-openid-connect/197127 "2019-08-28T13:40:30Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dave\_Russell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dave_russell/32/42250_2.png) [@Dave\_Russell](https://discuss.elastic.co/u/Dave_Russell)\
**Post date:** [August 28, 2019, 1:40pm UTC](https://discuss.elastic.co/t/support-for-openid-connect/197127/1 "2019-08-28T13:40:30Z")

</div>

Elasticsearch supports OpenId Connect as an authentication source. I believe this requires a GOLD licence, or a paid-for security plugin (Search Guard) ?

If my ES instance is using OpenID Connect, can AppSearch use the same users ?

Or does it require AppSearch specific logins to be created? There is a mention of SAML support, but no mention of Active Directory / OpenID etc, or if ES plugin-provided security would be supported.

---

<div class="post-metadata">

**Author:** ![Brian\_McGue](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brian_mcgue/32/63366_2.png) [@Brian\_McGue](https://discuss.elastic.co/u/Brian_McGue)\
**Post date:** [August 28, 2019, 4:17pm UTC](https://discuss.elastic.co/t/support-for-openid-connect/197127/2 "2019-08-28T16:17:14Z")

</div>

Hi Dave,

Self-Managed App Search recently launched supporting users within the SAML and Native realms of Elasticsearch, as you mentioned. It is also possible to create users directly within App Search, but at this time, OpenID Connect is not supported.

As of August 2019, there are no current plans to add this feature, but it's definitely a possibility for the future!

---

<div class="post-metadata">

**Author:** ![Dave\_Russell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dave_russell/32/42250_2.png) [@Dave\_Russell](https://discuss.elastic.co/u/Dave_Russell)\
**Post date:** [August 29, 2019, 8:12am UTC](https://discuss.elastic.co/t/support-for-openid-connect/197127/3 "2019-08-29T08:12:01Z")

</div>

> As of August 2019, there are no current plans to add this feature

Does that mean there is a roadmap of features that _are_ planned ? Can we see it?

---

<div class="post-metadata">

**Author:** ![Brian\_McGue](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brian_mcgue/32/63366_2.png) [@Brian\_McGue](https://discuss.elastic.co/u/Brian_McGue)\
**Post date:** [August 29, 2019, 5:30pm UTC](https://discuss.elastic.co/t/support-for-openid-connect/197127/4 "2019-08-29T17:30:38Z")

</div>

There is certainly a road map for future work on App Search but it's not publicly available at the moment.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 26, 2019, 5:30pm UTC](https://discuss.elastic.co/t/support-for-openid-connect/197127/5 "2019-09-26T17:30:41Z")

</div>

Closed on September 26, 2019, 5:30pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
