topic Re: IDP failed to authenticate request - No Status Code? in Splunk Search

IDP failed to authenticate request - No Status Code?

hsuparta — Thu, 05 Dec 2019 04:01:04 GMT

We are currently facing Single Sign-On issues - getting the following error.

IDP failed to authneticate request. Status Code="" Check splunkd.log for more information about the failure.

Unlike other posts - there is no status code in our error and the splunkd.log doesn't give much information.

We have logged in locally and downloaded the metadata.xml file, we confirmed that the configuration is still same as the ADFS Relaying Party Trust.

Hopefully someone can assist - thanks!

Re: IDP failed to authenticate request - No Status Code?

DavidHourani — Thu, 05 Dec 2019 07:49:04 GMT

Hi @hsuparta,

Could you provide us with more details :
-Which Splunk version are you using ?
-Include the steps you followed for configuration.
-Include an extract of the authentication.conf file.

Re: IDP failed to authenticate request - No Status Code?

hsuparta — Thu, 12 Dec 2019 03:23:51 GMT

The version we are using is Splunk Cloud - Splunk Version 7.0.12
We have looked at the configurations from the following KB.
https://www.splunk.com/en_us/blog/cloud/configuring-microsofts-adfs-splunk-cloud.html
Where can we locate the authentication.conf file if we are using Splunk Cloud?

Re: IDP failed to authenticate request - No Status Code?

DavidHourani — Thu, 12 Dec 2019 06:05:53 GMT

You can access the file via a REST call :

https://<host>:<mPort>/services/configs/conf-{file}

More details here :
https://docs.splunk.com/Documentation/Splunk/8.0.0/RESTREF/RESTconf

To access the file directly you will need to contact support.