# Kibana/Elasticsearch SAML

**URL:** <https://forum.opensearch.org/t/kibana-elasticsearch-saml/1168>\
**Category:** Security\
**Created:** [July 18, 2019, 1:39am UTC](https://forum.opensearch.org/t/kibana-elasticsearch-saml/1168 "2019-07-18T01:39:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lrsmith](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/lrsmith/32/301_2.png) [@lrsmith](https://forum.opensearch.org/u/lrsmith)\
**Post date:** [July 18, 2019, 1:39am UTC](https://forum.opensearch.org/t/kibana-elasticsearch-saml/1168/1 "2019-07-18T01:39:35Z")

</div>

I have an Elasticsearch 7.1.1/Kibana-oss-7.1.1 cluster up using Opendistro security plugins. I am able to log in using internal users. SAML is configured on ES cluster and I see it getting loaded by the nodes, in the logs.

When I set auth to SAML, on Kibana, it starts up and indicates it is connecting to the cluster. But when I go to the Kibana main page I get the error ‘Something went wrong while retrieving the SAML configuration, please check your settings’ Instead of getting redirected to the idP login page.

I bumped up all the logging and I don’t see any errors or indications of why kibana is failing to get the SAML configs from the ES.

# kibana.yml

elasticsearch.hosts: [“[https://elasticsearch.local:9200](https://elasticsearch.local:9200)”]  
elasticsearch.username: “kibana”  
elasticsearch.password: “”  
server.ssl.enabled: true  
server.ssl.certificate: /etc/ssl/kibana.crt  
server.ssl.key: /etc/ssl/kibana.key  
opendistro\_security.auth.type: “saml”  
server.xsrf.whitelist: [“/\_opendistro/\_security/saml/acs”]

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [April 15, 2021, 2:06pm UTC](https://forum.opensearch.org/t/kibana-elasticsearch-saml/1168/2 "2021-04-15T14:06:50Z")

</div>

@lrsmith Did you get this resolved? If not, can you provide your config.yml file? (redact any sensitive details)
