Integrate Kibana authentication to Crowd

[Ashok Arunakiri]

Hello,

We looking to use Crowd as IDP or the directory to authenticate against to login to to Kibana +Logstash stack. As we already have integrated Crowd to SCM ,GIT and Jenkins in addition to Jira and confluence I m looking to centralise the authentication with crowd for Logstash as well. At the moment we using X-PACK with kibana. The realms supported for Kibana are listed under https://www.elastic.co/guide/en/kibana/current/kibana-authentication.html#oidc

Any guidance is appreciated.

[Roman Kovalov]

Hello @Ashok Arunakiri and welcome to the community.

To enable SSO in Crowd for ELK stack I used this guide.
I did this steps, and everything worked fine for me:

1) Create generic application in Crowd, and Download metadata file from it (don't forget to add Assertion Consumer URL and Entity ID, it should be default for Kibana):

2) Put metadata.xml file in your elasticsearch config folder. Then create new realm for saml authentication in elasticsearch.yml.

3) Use created realm in kibana. You need to change kibana.yml file in kibana's config folder.

4)If you did everything correct, you should see similar login page:

Hope that will help you.
If you have any questions, please ask.