topic Re: Splunk access to External users in Splunk Search

Splunk access to External users

Manasa_401 — Thu, 04 Apr 2024 14:34:23 GMT

Hello Splunkers,

My Splunk instance is configured with default SAML authentication. Now i wanted to add users from external domain to access list of Splunk dashboards. How can i do that?

I searched in community and found that we can use en-US/account/login?loginType=splunk after changing enable_insecure_login = False in web.conf

I'm little worried about the consequences after I change the above setting.
Is there any way to provide access to external users without any concerns with security.

Thank you in advance!

Re: Splunk access to External users

richgalloway — Thu, 04 Apr 2024 14:54:58 GMT

You do not have to do anything to enable_insecure_login to allow external users to use your Splunk. Just add a Splunk account for them and give them the loginType URL.

Re: Splunk access to External users

Manasa_401 — Thu, 04 Apr 2024 15:01:12 GMT

Hello @richgalloway

I created Splunk account to the user and gave URL en-US/account/login?loginType=splunk
but getting Bad Request

Re: Splunk access to External users

richgalloway — Thu, 04 Apr 2024 15:52:47 GMT

"en-US/account/login?loginType=splunk" is the tail end of the URL. Append it to your standard Splunk URL (https://<<my splunk>>/en-US/account/login?loginType=splunk).

Re: Splunk access to External users

Manasa_401 — Thu, 04 Apr 2024 15:56:04 GMT

Hello @richgalloway

Yes, I appended that to my instance URL and got that bad request.

Re: Splunk access to External users

richgalloway — Thu, 04 Apr 2024 16:02:34 GMT

Try loginType=Splunk

Re: Splunk access to External users

SanjayReddy — Thu, 04 Apr 2024 20:21:16 GMT

Hi @Manasa_401

response provided by @richgalloway , will work.

https://localhost:8000/en-US/account/login?loginType=splunk

In addition to rich reponse. if your existing URL contains 8000 number keep that as well.
sometimes it might be issue with language en-us or en-gb , kindly try with language for URL with SAML auth