https://community.splunk.com/t5/Security/Using-SAML-with-multiple-idP/m-p/476194#M11025 <P>Currently we are connecting our Splunk Searchheads to our idBroker. The idBroker supports the use of multiple id Providers.</P> <P>According to the documentation, Splunk only uses three fields: role, realname and mail.<BR />(<A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/ConfigureSSOinSplunkWeb" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/ConfigureSSOinSplunkWeb</A> and<BR /><A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Admin/Authenticationconf#Authentication_Response_Attribute_Map" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.3/Admin/Authenticationconf#Authentication_Response_Attribute_Map</A>)</P> <P>But since we will use multiple idProviders, we will need to map the scSourceIssuer too. <BR />(<A href="http://schemas.swisscom.com/ws/2019/01/identity/claims/scSourceIssuer=scSourceIssuer" target="_blank">http://schemas.swisscom.com/ws/2019/01/identity/claims/scSourceIssuer=scSourceIssuer</A>)</P> <P>Does anyone know who to solve that?</P> Sun, 07 Jun 2020 17:44:32 GMT markusspitzli 2020-06-07T17:44:32Z https://community.splunk.com/t5/Security/Using-SAML-with-multiple-idP/m-p/476194#M11025 <P>Currently we are connecting our Splunk Searchheads to our idBroker. The idBroker supports the use of multiple id Providers.</P> <P>According to the documentation, Splunk only uses three fields: role, realname and mail.<BR />(<A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/ConfigureSSOinSplunkWeb" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.3/Security/ConfigureSSOinSplunkWeb</A> and<BR /><A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Admin/Authenticationconf#Authentication_Response_Attribute_Map" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.3/Admin/Authenticationconf#Authentication_Response_Attribute_Map</A>)</P> <P>But since we will use multiple idProviders, we will need to map the scSourceIssuer too. <BR />(<A href="http://schemas.swisscom.com/ws/2019/01/identity/claims/scSourceIssuer=scSourceIssuer" target="_blank">http://schemas.swisscom.com/ws/2019/01/identity/claims/scSourceIssuer=scSourceIssuer</A>)</P> <P>Does anyone know who to solve that?</P> Sun, 07 Jun 2020 17:44:32 GMT https://community.splunk.com/t5/Security/Using-SAML-with-multiple-idP/m-p/476194#M11025 markusspitzli 2020-06-07T17:44:32Z https://community.splunk.com/t5/Security/Using-SAML-with-multiple-idP/m-p/532411#M11999 <P>Request a feature on ideas.splunk.com, asking for support of more than 1 SAML IDP.</P><P>&nbsp;</P> Tue, 08 Dec 2020 22:46:47 GMT https://community.splunk.com/t5/Security/Using-SAML-with-multiple-idP/m-p/532411#M11999 khourihan_splun 2020-12-08T22:46:47Z