# Configuring OpenDistro Security Plugin for OpenID Connect using Azure AD App Registration **URL:** \ **Category:** Security\ **Created:** [June 1, 2021, 12:22pm UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091 "2021-06-01T12:22:49Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![arunkumarsingh](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@arunkumarsingh](https://forum.opensearch.org/u/arunkumarsingh)\ **Post date:** [June 1, 2021, 12:22pm UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091/1 "2021-06-01T12:22:49Z")
Hi All, While configuring OpenDistro Security plugin for OIDC using Azure AD app registration, I am aware to what will be url for Kibana to register and how to use it. Kibana URL - [https://localhost:5601/auth/openid/login](https://localhost:5601/auth/openid/login) I dont see the examples for elasticsearch api urls registration. Is the URL will be similar to like this - [https://localhost:9200/](https://localhost:9200/) ??? and how to get token to use it. Any guidance will be highly appreciated. Thanks ---
**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\ **Post date:** [July 7, 2021, 2:57pm UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091/2 "2021-07-07T14:57:47Z")
HI @arunkumarsingh Why do you want to configure ES in Azure? If you want to use Kibana, there is no need to configure ES. ---
**Author:** ![arunkumarsingh](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@arunkumarsingh](https://forum.opensearch.org/u/arunkumarsingh)\ **Post date:** [July 12, 2021, 10:42am UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091/3 "2021-07-12T10:42:29Z")
Hi @pablo Thanks for the response. Sorry, I may have confused you, Let me rephrase it We are using Microsoft Identity Solution (Azure AD). Security team is advising not to use **basic auth** for Elasticsearch APIs. So I wanted to go for any other modern auth. (ex: OAuth/ SAML/ OpenID) keeping Kibana’s OpenID Auth intact. Please advise. Thanks ---
**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\ **Post date:** [July 12, 2021, 1:19pm UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091/4 "2021-07-12T13:19:51Z")
@arunkumarsingh, basicauth is required for Kibana. It has to be enabled and configured in config.yml along with OAuth/SAML/OpenID authentication. ---
**Author:** ![arunkumarsingh](https://avatars.discourse-cdn.com/v4/letter/a/ba8739/32.png) [@arunkumarsingh](https://forum.opensearch.org/u/arunkumarsingh)\ **Post date:** [July 12, 2021, 1:57pm UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091/5 "2021-07-12T13:57:17Z")
Thanks @pablo for the information. In Case of Kibana I am aware that it is a requirement. I was wondering how this config will work. Kibana [openid] / Elasticsearch [basic + OAuth/SAML] Any pointer to config file arrangement will help. Thanks ---
**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\ **Post date:** [November 19, 2021, 2:27pm UTC](https://forum.opensearch.org/t/configuring-opendistro-security-plugin-for-openid-connect-using-azure-ad-app-registration/6091/6 "2021-11-19T14:27:45Z")
@arunkumarsingh you can’t run separate authentication for Kibana and ES. If you go with OID then both have to be set for OID.