topic Re: Python SDK to support SAML? in Splunk Dev

Python SDK to support SAML?

jordan_hy — Sun, 07 Jun 2020 18:49:53 GMT

My organization recently updated to SAML for Splunk and I am no longer able to connect to Splunk via the Python SDK. Whenever I try and connect I receive "AuthenticationError: Login failed."

I am trying to connect using the method outlined in the "How to run searches and jobs using the Splunk SDK for Python" post that Splunk published.

Am I doing something incorrectly? Or does the Splunk SDK not support SAML?

Re: Python SDK to support SAML?

adamcysec — Thu, 15 Dec 2022 21:20:08 GMT

Anyone mange to find an answer to this?

Im in the situation with splunk instance configured with SSO.

Re: Python SDK to support SAML?

adamcysec — Thu, 15 Dec 2022 21:54:52 GMT

I found an article from Splunk about auth tokens: https://docs.splunk.com/Documentation/Splunk/9.0.2/Security/UseAuthTokens

Looks like a Splunk admin would be able to create an API token for your account and you could authenticate with the token, like so: https://docs.splunk.com/DocumentationStatic/PythonSDK/1.7.2/client.html?highlight=session#splunklib.client.connect

I will have this implemented in my environment and update this post if it worked.