https://community.splunk.com/t5/Installation/Can-SSO-with-Okta-be-setup-without-SSL/m-p/216877#M3419 <P>SAML assertions can be signed and/or encrypted, or neither.<BR /> <A href="http://stackoverflow.com/questions/8276233/is-it-recommended-to-sign-and-encrypt-saml-and-use-ssl">http://stackoverflow.com/questions/8276233/is-it-recommended-to-sign-and-encrypt-saml-and-use-ssl</A></P> <P>I do not encrypt the assertions between my IdP and splunk, nor do I see a requirement to do so. However splunk will only accept signed assertions:</P> <PRE><CODE>authentication.conf signedAssertion = [true|false] * OPTIONAL * This tells Splunk if the SAML assertion has been signed by the IDP * If set to false, Splunk will not verify the signature of the assertion using the certificate of the IDP. * Currently, we accept only signed assertions. </CODE></PRE> Thu, 10 Nov 2016 20:35:12 GMT suarezry 2016-11-10T20:35:12Z https://community.splunk.com/t5/Installation/Can-SSO-with-Okta-be-setup-without-SSL/m-p/216876#M3418 <P>I am setting up Okta SSO in our Splunk Enterprise 6.5.0 installation. This is my first SSO integration and just want to make sure of the requirement.</P> Thu, 10 Nov 2016 20:14:41 GMT https://community.splunk.com/t5/Installation/Can-SSO-with-Okta-be-setup-without-SSL/m-p/216876#M3418 eric_landry 2016-11-10T20:14:41Z https://community.splunk.com/t5/Installation/Can-SSO-with-Okta-be-setup-without-SSL/m-p/216877#M3419 <P>SAML assertions can be signed and/or encrypted, or neither.<BR /> <A href="http://stackoverflow.com/questions/8276233/is-it-recommended-to-sign-and-encrypt-saml-and-use-ssl">http://stackoverflow.com/questions/8276233/is-it-recommended-to-sign-and-encrypt-saml-and-use-ssl</A></P> <P>I do not encrypt the assertions between my IdP and splunk, nor do I see a requirement to do so. However splunk will only accept signed assertions:</P> <PRE><CODE>authentication.conf signedAssertion = [true|false] * OPTIONAL * This tells Splunk if the SAML assertion has been signed by the IDP * If set to false, Splunk will not verify the signature of the assertion using the certificate of the IDP. * Currently, we accept only signed assertions. </CODE></PRE> Thu, 10 Nov 2016 20:35:12 GMT https://community.splunk.com/t5/Installation/Can-SSO-with-Okta-be-setup-without-SSL/m-p/216877#M3419 suarezry 2016-11-10T20:35:12Z