topic Re: Saml response does not contain group information (Okta) in Splunk Cloud Platform

Saml response does not contain group information (Okta)

Lien — Mon, 09 Jun 2025 02:53:42 GMT

I am using Okta to configure SAML for splunk.

Following the step of introduction, I created a SAML group in Splunk and same group name in Okta. Made a role mapping.

https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Splunk-Cloud.html

When finished the setup, the logon page is through Okta but it got below error message after filled in user email and password in Okta logon page.

Saml response does not contain group information.

Attached the output of saml-tracer addon.

Did I miss something?

Re: Saml response does not contain group information (Okta)

livehybrid — Mon, 09 Jun 2025 10:27:52 GMT

Hi @Lien

I assume your user has been assigned to a relevant group in Okta that is relevant to the Splunk application?

I have seen an issue before with users who having 100+ groups where the SAML response doesnt send the groups, I wonder if that could be the case here - does your user have a high count of groups in Okta?

I dont know if you have seen this but it may be useful? https://splunk.my.site.com/customer/s/article/SAML-user-unable-to-login

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Saml response does not contain group information (Okta)

Lien — Mon, 09 Jun 2025 23:11:13 GMT

Hi @livehybrid ,

Thank you for your reply. I only created one group. I am using Splunk cloud trial version. Is there any limitation for setting up SSO?

Also another problem is once it shows that error page, I could not logon with local user anymore. It redirect to Okta when I access. Then I lost opportunity to logon Splunk Cloud.

Re: Saml response does not contain group information (Okta)

sainag_splunk — Tue, 10 Jun 2025 03:21:16 GMT

@Lien unfortunately, its not supported for the splunkcloud trial version.

https://docs.splunk.com/Documentation/SplunkCloud/latest/Admin/TypesofSplunkClouddeployment

If this Helps, Please Upvote!