# Searchguard cookie samesite **URL:** \ **Category:** Search Guard\ **Created:** [March 26, 2020, 11:15am UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778 "2020-03-26T11:15:30Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![HelderMarques91](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@HelderMarques91](https://forum.search-guard.com/u/HelderMarques91)\ **Post date:** [March 26, 2020, 11:15am UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/1 "2020-03-26T11:15:31Z")
I’m having a problem opening the kibana with searchguard in an iframe in my application. This only happens with the new version of chrome. [Cookies default to SameSite=Lax - Chrome Platform Status](https://www.chromestatus.com/feature/5088147346030592) Error: A cookie associated with a cross-site resource at [http://192.168.1.9/](http://192.168.1.9/) was set without the `SameSite` attribute. It has been blocked, as Chrome now only delivers cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application\>Storage\>Cookies and see more details at [Cookies default to SameSite=Lax - Chrome Platform Status](https://www.chromestatus.com/feature/5088147346030592) and [Reject insecure SameSite=None cookies - Chrome Platform Status](https://www.chromestatus.com/feature/5633521622188032). Is it possible to solve the problem without updating the searchguard? ---
**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\ **Post date:** [March 26, 2020, 11:46am UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/2 "2020-03-26T11:46:01Z")
Do you say your setup worked before Chrome v80.0.3987.149? In order to reproduce your issue, we need more info: 1. Kbana config, kibana.yml 2. Searchguard config, sg\_config.yml 3. Kibana logs if you have any errors there. Make sure you have the following options in kibana.yml ```auto logging.silent: false logging.quiet: false ``` 1. Elasticsearch logs if you have any errors there. ---
**Author:** ![HelderMarques91](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@HelderMarques91](https://forum.search-guard.com/u/HelderMarques91)\ **Post date:** [March 26, 2020, 12:08pm UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/3 "2020-03-26T12:08:06Z")
> [@srgbnd](#): > > Você diz que sua instalação funcionou antes do Chrome v80.0.3987.149? Yes. In all other browsers it works normally. The problem is not with any elastic/ kibana/searchguard configuration. Is it possible to change the value of the samesite as the searchguard plugin? ![image](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/b74b42fb3a894e5791cfb43fde6585ca4aef92cc.png) If in chrome disable ‘samesite by deafult cookies’ it works normally. ![image](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/c1bb7282e4b6dce64df5f681706abfc2f780c12c.png) ---
**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\ **Post date:** [March 26, 2020, 1:59pm UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/4 "2020-03-26T13:59:39Z")
What authentication type did you configure in SearchGuard? ---
**Author:** ![HelderMarques91](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@HelderMarques91](https://forum.search-guard.com/u/HelderMarques91)\ **Post date:** [March 26, 2020, 3:30pm UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/5 "2020-03-26T15:30:39Z")
HTTP basic authentication with anonymous mode ---
**Author:** ![HelderMarques91](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@HelderMarques91](https://forum.search-guard.com/u/HelderMarques91)\ **Post date:** [March 26, 2020, 4:11pm UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/6 "2020-03-26T16:11:48Z")
I found this at kibana github: > > > Currently, Kibana does not set the \`SameSite\` attribute on its session cookie. U…p until recently, this was tolerable, but Chrome recently (version \`80\`) updated its default configuration to treat unset \`SameSite\` attributes to mean \`Lax\` (https://www.chromestatus.com/feature/5088147346030592). > > This is problematic for users who embed Kibana in an iframe. We should allow the \`SameSite\` setting to be configurable via \`kibana.yml\`, so users can choose if they want \`Strict\`, \`Lax\`, or \`None\`. ---
**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\ **Post date:** [March 31, 2020, 10:18am UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/7 "2020-03-31T10:18:39Z")
Thank you. We will look into it. ---
**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\ **Post date:** [April 21, 2020, 10:18am UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/8 "2020-04-21T10:18:40Z")
Closed on April 21, 2020, 10:18am UTC This topic was automatically closed 21 days after the last reply. New replies are no longer allowed. ---
**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\ **Post date:** [April 23, 2020, 8:42am UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/9 "2020-04-23T08:42:05Z")
Opened on April 23, 2020, 8:42am UTC ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [April 24, 2020, 3:01pm UTC](https://forum.search-guard.com/t/searchguard-cookie-samesite/1778/10 "2020-04-24T15:01:55Z")
Will be fixed in the next version of the Kibana plugin.