topic Re: Splunk sends hostname in SAML Request in Splunk Enterprise

Splunk sends hostname in SAML Request

benkummer — Wed, 19 Aug 2026 14:47:07 GMT

We are configuring SAML Authentication in splunk.

We set up everything but splunk sends an SAMLRequest starting with trailing number because the hostname of the system is 1ourhostname.

<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest ID="1ourhostname..1.6E4A85A3-6AC1-4CC3-A9

The id Provider rejects the request because an id starting with numbers is incorrect.

What i tried set fqdn to the web url in both server.conf general and in the saml secttion in authentication.conf . That does not change the saml request. Any ideas?

authentication.conf:

[saml]

fqdn = splunk-test.system.local

server.conf:

[general]
serverName=splunk-test.system.local
fqdn = splunk-test.system.local

Re: Splunk sends hostname in SAML Request

livehybrid — Wed, 19 Aug 2026 18:33:53 GMT

Hi @benkummer

I would try and set the entityId value in the saml configuration of authentication.conf (see https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/configuration-file-reference/10.4.0-configuration-file-reference/authentication.conf#:~:text=changeme%0AattributeQuerySoapUsername%20%3D%20test-,entityId,-%3D%20test%2Dsplunk%0AidpAttributeQueryUrl)

[samlv2] entityId = yourServerNameWithoutNumericalPrefix

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful

Marking it as the solution if it resolved your issue

Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

Re: Splunk sends hostname in SAML Request

benkummer — Thu, 20 Aug 2026 06:36:39 GMT

Hi @livehybrid ,

thank you very much that worked.

In my configuration this value was the url to the metatada of the IDP before.

Cheers,
Ben