Deployment Architecture

How to Combine with custom's webservice api to achieved Single sign-on?

indigo1
Engager

1.custom have own itself single sign-on system,can provide webservice api,such as:

a. api url : http://10.50.11.100/MyWebSite/ProjectHome/WebService/DDLoginService.asmx?wsdl

b.method: UserAuthenticateByDES()

c.Request message:

<UserAuthenticateByDES xmlns="http://mymis.cgg.PublicService/">
  <account>******</account>
  <encodeText>******</encodeText>
</UserAuthenticateByDES>

d.Response message :

<UserAuthenticateByDESResponse xmlns="http://mymis.cgg.PublicService/">
  <UserAuthenticateByDESResult>false</UserAuthenticateByDESResult>
</UserAuthenticateByDESResponse>

as you know,splunk SSO only support saml & reverse proxy,
so,my question is: how to Combine with custom's webservice api to achieved Single sign-on?
any idea or reference?thanks a lot!!!

Tags (1)
0 Karma
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

View solution in original post

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

View solution in original post

0 Karma

indigo1
Engager

Thank you so much!
But can you please explain more detail aboout ' Build a scripted authentication plugin for Splunk that interacts with this web service',
Now I Suppose :
setp1: create a authentication script (run in splunk's server OR Client ?)
setp2: create a authentication.conf to active the script
and than?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

So to begin with - this is a software development effort - there is some documentation and some sample code available. I would start with http://docs.splunk.com/Documentation/Splunk/6.5.0/Security/ConfigureSplunkToUsePAMOrRADIUSAuthentica... and read and understand the sample code. This is a several day effort at best and will require testing and such.

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.