https://community.splunk.com/t5/Security/Splunk-SAML-SSO-with-mellon-on-apache-2-4/m-p/252824#M6976 <P>there was a number of issues - firstly, mismatched entity id in apache config compared to what the IdP was sending, and then other errors like signature algorithm support and redirecting. </P> <P>The full solution is posted here: <A href="http://serverfault.com/questions/739756/splunk-saml-sso-from-an-idp-with-apache-mod-mellon-fails/739989#739989">http://serverfault.com/questions/739756/splunk-saml-sso-from-an-idp-with-apache-mod-mellon-fails/739989#739989</A></P> <P>Prior to configuring SSO, Splunk was configured to authenticate against LDAP - the same ldap backend that the IdP uses.</P> Tue, 01 Dec 2015 16:56:01 GMT brettcave 2015-12-01T16:56:01Z https://community.splunk.com/t5/Security/Splunk-SAML-SSO-with-mellon-on-apache-2-4/m-p/252823#M6975 <P>I'm trying to configure SAML SSO to Splunk from an IdP. I've followed this guide to try get authentication working: <A href="http://blogs.splunk.com/2013/10/09/splunk-sso-using-saml-through-okta/">http://blogs.splunk.com/2013/10/09/splunk-sso-using-saml-through-okta/</A></P> <P>Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0; Splunk Enterprise 6.3.1 configured with LDAP authentication and group mapping.</P> <P>Configuration matches what is provided in the blog post. Apache logs show that it is unable to identify a user:</P> <PRE><CODE>[authz_core:debug] mod_authz_core.c(802): AH01626: authorization result of Require valid-user : denied (no authenticated user yet) [authz_core:debug] mod_authz_core.c(802): AH01626: authorization result of &lt;RequireAny&gt;: denied (no authenticated user yet) [core:error] AH00027: No authentication done but request not allowed without authentication for /secret/endpoint/login. Authentication not configured? </CODE></PRE> <P>So it seems that there is no authorization. Do I need to configure authentication within apache too? I've tried removing the <CODE>MellonUser</CODE> parameter and setting the user request header manually to <CODE>admin</CODE> to see what happens, but still fails with the above errors.</P> <P>Any idea why auth is failing?</P> Mon, 30 Nov 2015 14:32:12 GMT https://community.splunk.com/t5/Security/Splunk-SAML-SSO-with-mellon-on-apache-2-4/m-p/252823#M6975 brettcave 2015-11-30T14:32:12Z https://community.splunk.com/t5/Security/Splunk-SAML-SSO-with-mellon-on-apache-2-4/m-p/252824#M6976 <P>there was a number of issues - firstly, mismatched entity id in apache config compared to what the IdP was sending, and then other errors like signature algorithm support and redirecting. </P> <P>The full solution is posted here: <A href="http://serverfault.com/questions/739756/splunk-saml-sso-from-an-idp-with-apache-mod-mellon-fails/739989#739989">http://serverfault.com/questions/739756/splunk-saml-sso-from-an-idp-with-apache-mod-mellon-fails/739989#739989</A></P> <P>Prior to configuring SSO, Splunk was configured to authenticate against LDAP - the same ldap backend that the IdP uses.</P> Tue, 01 Dec 2015 16:56:01 GMT https://community.splunk.com/t5/Security/Splunk-SAML-SSO-with-mellon-on-apache-2-4/m-p/252824#M6976 brettcave 2015-12-01T16:56:01Z