topic Re: Integration with Deepnet Two Factor authtentication using SAML in Security

Integration with Deepnet Two Factor authtentication using SAML

ramesh_babu71 — Wed, 08 Feb 2017 08:20:49 GMT

Hello All,

We are unable to integrate Splunk 6.5.2 with Deepnet 2FA using SAML. When I access the Splunk login page then it is perfectly redirected to IDP login page then after provided the user credentials this error page gets displayed. The error says The saml response does not contain group information.

Authentication.conf

[authentication]
authSettings = saml
authType = SAML

[roleMap_SAML]
admin = deepnetgroup;

[saml]
entityId = splunkEntityId
fqdn = http://rhel7
idpCertPath = /opt/splunk/etc/auth/SSOServer.crt
idpSLOUrl = https://dualshield.wipro.com:8074/appsso/logout?DASApplicationName=Splunk WebSSO
idpSSOUrl = https://dualshield.wipro.com:8074/appsso/login?DASApplicationName=Splunk WebSSO

issuerId = https://dualshield.wipro.com:8074

redirectPort = 8000
signAuthnRequest = true
signatureAlgorithm = RSA-SHA1
signedAssertion = true
sloBinding = HTTPRedirect

sslKeysfile = /opt/splunk/etc/auth/server.pem

clientCert = /opt/splunk/etc/auth/server.pem

sslKeysfilePassword = $1$3umknA8lnEHb

sslPassword = $1$3umknA8lnEHb
ssoBinding = HTTPRedirect

Re: Integration with Deepnet Two Factor authtentication using SAML

suarezry — Wed, 08 Feb 2017 13:49:28 GMT

Use this browser tool to trace your SAML response:
https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/

Did your IdP include the role information in the response?

(...and your role name 'deepnetgroup;' includes a semicolon. Is this by design?)

Re: Integration with Deepnet Two Factor authtentication using SAML

ramesh_babu71 — Mon, 27 Mar 2017 12:30:33 GMT

Hi All,

I contacted Deepnet support (Vendor). They assisted us with this.

Re: Integration with Deepnet Two Factor authtentication using SAML

richgalloway — Mon, 27 Mar 2017 14:05:33 GMT

Please share the resolution.

Re: Integration with Deepnet Two Factor authtentication using SAML

ramesh_babu71 — Mon, 24 Apr 2017 15:07:06 GMT

Hi Rich,

Deepnet has published full steps of integration in their wiki page

http://wiki.deepnetsecurity.com/pages/viewpage.action?pageId=2818969