topic Re: Does CLI authentication per LDAP work while web authentication per SAML is activated? in Security

Does CLI authentication per LDAP work while web authentication per SAML is activated?

DennisFFM — Tue, 17 Oct 2017 12:07:18 GMT

We switched our Splunk web authentication from LDAP to SAML.

Now when I for example try to "apply cluster-bundle", I can't authenticate myself with my LDAP credentials anymore,
only with the local Splunk admin.

Is there a way to configure the CLI authentication to use LDAP while the web authentication works with SAML?

Re: Does CLI authentication per LDAP work while web authentication per SAML is activated?

mtulett_splunk — Wed, 22 Nov 2017 22:49:47 GMT

No unfortunately, as the authentication system is the same for both internally.

I would recommend creating a local admin user for each administrator, using something like DennisFFM_admin, vs your normal DennisFFM account. This way you can have local authentication on the cluster with auditing tied to the user, but still log into the web interface with SSO.

Re: Does CLI authentication per LDAP work while web authentication per SAML is activated?

DennisFFM — Thu, 23 Nov 2017 09:10:29 GMT

Hi @mtulett, thank you for your answer.

I think that's actually the best way to do it.
I hope there will be a possibility in the future to configure a different authentication system for CLI users.

Cheers!

Dennis