Deployment Architecture

How to Combine with custom's webservice api to achieved Single sign-on?

indigo1
Engager

1.custom have own itself single sign-on system,can provide webservice api,such as:

a. api url : http://10.50.11.100/MyWebSite/ProjectHome/WebService/DDLoginService.asmx?wsdl

b.method: UserAuthenticateByDES()

c.Request message:

<UserAuthenticateByDES xmlns="http://mymis.cgg.PublicService/">
  <account>******</account>
  <encodeText>******</encodeText>
</UserAuthenticateByDES>

d.Response message :

<UserAuthenticateByDESResponse xmlns="http://mymis.cgg.PublicService/">
  <UserAuthenticateByDESResult>false</UserAuthenticateByDESResult>
</UserAuthenticateByDESResponse>

as you know,splunk SSO only support saml & reverse proxy,
so,my question is: how to Combine with custom's webservice api to achieved Single sign-on?
any idea or reference?thanks a lot!!!

Tags (1)
0 Karma
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

View solution in original post

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

0 Karma

indigo1
Engager

Thank you so much!
But can you please explain more detail aboout ' Build a scripted authentication plugin for Splunk that interacts with this web service',
Now I Suppose :
setp1: create a authentication script (run in splunk's server OR Client ?)
setp2: create a authentication.conf to active the script
and than?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

So to begin with - this is a software development effort - there is some documentation and some sample code available. I would start with http://docs.splunk.com/Documentation/Splunk/6.5.0/Security/ConfigureSplunkToUsePAMOrRADIUSAuthentica... and read and understand the sample code. This is a several day effort at best and will require testing and such.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...