Open
Description
Description
Currently, we have some watchers that generate reports and send them via email. As far as we know these reports are generated by making a request to a specific endpoint using the credentials defined in the watcher:
...
"actions": {
"email_admin": {
"email": {
"profile": "standard",
"attachments": {
"error_report.csv": {
"reporting": {
"url": "https://kibana-xxxx.dev.xxxx.net/s/my-dashboards/api/reporting/generate/csv?jobParams",
"retries": 40,
"interval": "15s",
"auth": {
"basic": {
"username": "user_reporting",
"password": "password"
}
}
}
}
},
...
The problem comes when we decide to restrict the auth method of Kibana to only use SAML, once the basic auth is disabled the watcher is incapable of auth to Kibana, and the watcher does not work anymore. After conversations with the Elasticsearch support, they suggest opening this request to get an alternative to use this kind of watcher without basic auth.
Kind Regards.