topic Re: splunk SSO configuration in Splunk Enterprise

splunk SSO configuration

martinnepolean — Tue, 06 Oct 2020 11:53:06 GMT

We are working to integrate splunk with IDAM for SSO. WE have three splunk search head cluster for three set of users groups. On checking the splunk metadata file, IDAM engineer is telling that all three environments has same entity ID and we need to change it to differentiate between the clusters. Please let me know how to do it.

Re: splunk SSO configuration

dmacintosh_splu — Tue, 06 Oct 2020 18:12:57 GMT

The documentation covers a number of vendors specifically, please refer to one if it matches your vendor. If not, generally you will find it in the authentication.conf file used in this configuration. entityId is a parameter avaialble and should be the same among members of the same SHC to use smooth single logout. Each SHC entityId used is the change you asked about.

https://docs.splunk.com/Documentation/Splunk/8.0.6/Security/ConfigureSAMLSSO#Configure_SSO_using_SAML_with_authentication.conf

Re: splunk SSO configuration

martinnepolean — Wed, 07 Oct 2020 11:06:34 GMT

Thanks for the reply but this link doesn't give any information about changing the entityid of the splunk

Re: splunk SSO configuration

inventsekar — Wed, 07 Oct 2020 11:14:07 GMT

Hi @martinnepolean

this blog is about okta saml, but, it got some info about the entityID.. pls check it.. thanks.

https://www.splunk.com/en_us/blog/cloud/configuring-okta-saml-single-sign-on-with-splunk-cloud-using-the-okta-splunk-cloud-app.html

Re: splunk SSO configuration

martinnepolean — Thu, 08 Oct 2020 11:02:04 GMT

@inventsekar This link doesn't have any information for changing entityID of the splunk