Easy integration of multiple auth methods. It's very easy for developers who don't have too much experience in this field as well! The UI is not that great but it has improved over time (I think they are planning something new). I've been using search guard since 2015 when we were building our first kubernetes clusters at my previous job so i know how painful was back then :) But now things seem easier than ever before thanks mostly due to searchguard features. We use both basic username password credentials along side token-based access control from 3rd party identity providers such as Okta or PingFederate etc..