{"id":397062,"date":"2024-06-29T13:13:28","date_gmt":"2024-06-29T13:13:28","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=397062"},"modified":"-0001-11-30T00:00:00","modified_gmt":"2024-06-29T13:13:28","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=397062","title":{"rendered":"Google SSO for Kibana straightforward way on basic license<\/span>"},"content":{"rendered":"
<\/div>\n
\n
\n
\n
\n

As many times before, I keep writing cheat sheets after the tasks which made me search a lot and glue things together before I found a solution. Long story short, this time I was asked to set up Google SSO for Kibana without switching from a basic license to a paid one. Kibana, by the moment, already had authentication set up and the\u00a0customer wanted to log in there with the use of Google Workspace user accounts. Along with that, the customer wanted to keep user\u00a0account which was\u00a0already there, in Kibana. There was no need for role mapping or other advanced features, just plain SSO and that’s all. As you probably know Elastic provides SSO feature only on paid license, so I have had no other way to get it working except for using 3rd party software. But first things first, let’s list the steps we should\u00a0go over:<\/p>\n

    \n
  1. \n

    Create credentials for the application in GCP Console<\/p>\n<\/li>\n

  2. \n

    Install and set up oauth2-proxy<\/p>\n<\/li>\n

  3. \n

    Set up Nginx<\/p>\n<\/li>\n<\/ol>\n

    Now let’s dig into the details.<\/p>\n

    Presumptions<\/h2>\n
    \n

    Kibana’s\u00a0url:\u00a0https:\/\/kibana.example.com<\/a><\/p>\n

    Username for logging into Kibana: kibana<\/strong><\/p>\n

    Password for user kibana<\/code>: $3cuRep@sSW0rd<\/strong><\/p>\n

    Nginx is set up and used for reverse-proxying Kibana<\/p>\n<\/blockquote>\n

    Getting credentials for authentication at GCP <\/h2>\n

    Navigate to\u00a0https:\/\/console.cloud.google.com\/apis\/credentials<\/a><\/p>\n

    \nIf you don’t have any GCP project yet, you should create one<\/summary>\n
    \n

    You can refer to the documentation on the topic\u00a0https:\/\/cloud.google.com\/resource-manager\/docs\/creating-managing-projects<\/a><\/p>\n

    Don’t forget to add authorized email domains which users will be allowed to log into Kibana. <\/p>\n

    <\/figure>\n<\/p>\n<\/div>\n<\/details>\n
    <\/figure>\n

    On the next page select Application type<\/code> as Web application, Name<\/code> could be any of your preferences, then put URLs of your Kibana as follows:<\/p>\n