Deployment Architecture

How to Combine with custom's webservice api to achieved Single sign-on?

indigo1
Engager

1.custom have own itself single sign-on system,can provide webservice api,such as:

a. api url : http://10.50.11.100/MyWebSite/ProjectHome/WebService/DDLoginService.asmx?wsdl

b.method: UserAuthenticateByDES()

c.Request message:

<UserAuthenticateByDES xmlns="http://mymis.cgg.PublicService/">
  <account>******</account>
  <encodeText>******</encodeText>
</UserAuthenticateByDES>

d.Response message :

<UserAuthenticateByDESResponse xmlns="http://mymis.cgg.PublicService/">
  <UserAuthenticateByDESResult>false</UserAuthenticateByDESResult>
</UserAuthenticateByDESResponse>

as you know,splunk SSO only support saml & reverse proxy,
so,my question is: how to Combine with custom's webservice api to achieved Single sign-on?
any idea or reference?thanks a lot!!!

Tags (1)
0 Karma
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

View solution in original post

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

0 Karma

indigo1
Engager

Thank you so much!
But can you please explain more detail aboout ' Build a scripted authentication plugin for Splunk that interacts with this web service',
Now I Suppose :
setp1: create a authentication script (run in splunk's server OR Client ?)
setp2: create a authentication.conf to active the script
and than?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

So to begin with - this is a software development effort - there is some documentation and some sample code available. I would start with http://docs.splunk.com/Documentation/Splunk/6.5.0/Security/ConfigureSplunkToUsePAMOrRADIUSAuthentica... and read and understand the sample code. This is a several day effort at best and will require testing and such.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...