Following optional realm settings are supported:
force_authnSpecifies whether to set the
ForceAuthnattribute when requesting that the IdP authenticate the current user. If set to
true, the IdP is required to verify the user’s identity, irrespective of any existing sessions they might have. Defaults to
idp.use_single_logoutIndicates whether to utilise the Identity Provider’s
<SingleLogoutService>(if one exists in the IdP metadata file). Defaults to
After completing these steps, you can log in to Kibana by authenticating against your SAML IdP. If you encounter any issues with the configuration, please take a look at our SAML troubleshooting page which contains information about common issues and suggestions for their resolution.