the preferred tenant setting does not seem to work as expected on the latest version of SG with Kibana/ES 7.6.2
As long as the “Private” tenant is enabled it will always be selected first for a new user on first login.
This is the relevant part in kibana.yml:
searchguard: multitenancy: enabled: true tenants: enable_global: false enable_private: true preferred: - ABC - EFG - Private
Given a user
test with read access to
ABC I’d expect it to be selected as the initial tenant, but
Private is selected instead (tried multiple times with newly created accounts).