I’m really newbie with SG and Elasticsearch.
I’m trying to configure Kibana authentication based on Ambassador edge stack OAuth2 against Google idp. The ambassador config is based on Filter and injectRequestHeaders setting. I can get a Secure Guard login page with “Proxy based authentication”, but my goal is to recognize the Google user I authenticated in Ambassador. Can this be achieved in the community edition of SG or it requires Enterprise license?
I see the Ambassador Edge Stack works with OpenID standard. You need to configure the OpenID authentication in Elasticsearch Search Guard plugin. Then configure the OpenID authentication in Kibana Search Guard plugin.
Look at the following documentation, and you find a minimal configuration needed.