https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75092#M2508 <P>I have got it configured with help of another person in the company who has done it.</P> Tue, 02 Jul 2013 11:05:20 GMT anoopambli 2013-07-02T11:05:20Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75091#M2507 <P>I am working on enabling SSO on splunk using siteminder. I have worked with siteminder folks in my company and got apache and siteminder webagent installed and configured. Apache is installed on the same server as splunk. At this point the apache proxy url is going through siteminder and gives me "it works" page, looks like i need to setup splunk to accept the siteminder requests and authorize the user.</P> <P>Currently splunk is using its own authentication system, i have done the steps of adjusting server.conf and web.conf as per the below url but after that proxy based URL is not redirecting me to splunk. Can someone help me with understanding what all config needs to be done in splunk to get this working.</P> <H1>About Splunk Single Sign-On</H1> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/HowSplunkSSOworks">http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/HowSplunkSSOworks</A></P> <H1>Configure Splunk Single Sign-On</H1> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/ConfigureSplunkSSO">http://docs.splunk.com/Documentation/Splunk/5.0.3/Security/ConfigureSplunkSSO</A></P> Tue, 25 Jun 2013 15:09:37 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75091#M2507 anoopambli 2013-06-25T15:09:37Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75092#M2508 <P>I have got it configured with help of another person in the company who has done it.</P> Tue, 02 Jul 2013 11:05:20 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75092#M2508 anoopambli 2013-07-02T11:05:20Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75093#M2509 <P>Hi anoopambli... Can you pls let us know how did you configured pls ??</P> Thu, 02 Jan 2014 13:23:52 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75093#M2509 rakesh_498115 2014-01-02T13:23:52Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75094#M2510 <P>Are you asking about steps specific to splunk config?</P> Thu, 02 Jan 2014 13:41:51 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75094#M2510 anoopambli 2014-01-02T13:41:51Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75095#M2511 <P>Yeah anoopambli...it would be helpful for us to configure our SH's please</P> Fri, 03 Jan 2014 07:30:57 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75095#M2511 rakesh_498115 2014-01-03T07:30:57Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75096#M2512 <P>Hi anoopambli,<BR /> could you share your findings with us?<BR /> We are looking to integrate splunk into a portal with SSO, perhaps using siteminder<BR /> Currently we have the problem understand the benefit of using siteminder <BR /> Thanks<BR /> Jan</P> Thu, 24 Jul 2014 15:28:06 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75096#M2512 waechtler 2014-07-24T15:28:06Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75097#M2513 <P>I managed to get Splunk working with SiteMinder, but am running into an error when using the drill-down functionality. The SiteMinder WebAgent is flagging this as Cross Site Scripting behavior. Since the Splunk search is included in the URL, the BadCSSChars parameter of the SiteMinder WebAgent Agent Configuration Object is blocking the query, and returning an HTTP 403 error.</P> <P>We have a standard set of characters defined as BadCSSChars, to prevent Cross Site Scripting, and I'm not sure I will be allowed to deviated from this standard to get Splunk working. Does anyone have any ideas how to work around this issue?</P> Tue, 16 Sep 2014 19:07:13 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75097#M2513 brettcarroll 2014-09-16T19:07:13Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75098#M2514 <OL> <LI><P>Change Splunk to use LDAP authentication.</P></LI> <LI><P>Setup a reverse proxy server (apache with mod_proxy) and the CA SiteMinder Web Agent installed.</P></LI> <LI><P>Protect the reverse proxy in SiteMinder.</P></LI> <LI><P>edit .../splunk/etc/system/local/web.conf<BR /> [settings]<BR /> httpport = 80<BR /> SSOMode = strict<BR /> trustedIP = ip_address_of_your_reverse_proxy<BR /> remoteUser = SM_UNIVERSALID</P></LI> <LI><P>Restart splunk</P></LI> </OL> Mon, 28 Sep 2020 17:36:07 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75098#M2514 brettcarroll 2020-09-28T17:36:07Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75099#M2515 <P>I downvoted this post because no details of solution given.</P> Mon, 26 Jun 2017 19:22:05 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75099#M2515 ddearmond_splun 2017-06-26T19:22:05Z https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75100#M2516 <P>I downvoted this post because it is not an answer.</P> Mon, 26 Jun 2017 19:28:10 GMT https://community.splunk.com/t5/Security/Enabling-SSO-in-splunk-using-siteminder/m-p/75100#M2516 ddearmond_splun 2017-06-26T19:28:10Z