Deployment Architecture

How to Combine with custom's webservice api to achieved Single sign-on?

indigo1
Engager

1.custom have own itself single sign-on system,can provide webservice api,such as:

a. api url : http://10.50.11.100/MyWebSite/ProjectHome/WebService/DDLoginService.asmx?wsdl

b.method: UserAuthenticateByDES()

c.Request message:

<UserAuthenticateByDES xmlns="http://mymis.cgg.PublicService/">
  <account>******</account>
  <encodeText>******</encodeText>
</UserAuthenticateByDES>

d.Response message :

<UserAuthenticateByDESResponse xmlns="http://mymis.cgg.PublicService/">
  <UserAuthenticateByDESResult>false</UserAuthenticateByDESResult>
</UserAuthenticateByDESResponse>

as you know,splunk SSO only support saml & reverse proxy,
so,my question is: how to Combine with custom's webservice api to achieved Single sign-on?
any idea or reference?thanks a lot!!!

Tags (1)
0 Karma
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

View solution in original post

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Look into Splunk's scripted authentication support. Build a scripted authentication plugin for Splunk that interacts with this web service. It won't be truly 'single' sign-on (as in sign on once and everything from then on just works), but it will be able to use this web service as an authentication source similar to LDAP.

0 Karma

indigo1
Engager

Thank you so much!
But can you please explain more detail aboout ' Build a scripted authentication plugin for Splunk that interacts with this web service',
Now I Suppose :
setp1: create a authentication script (run in splunk's server OR Client ?)
setp2: create a authentication.conf to active the script
and than?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

So to begin with - this is a software development effort - there is some documentation and some sample code available. I would start with http://docs.splunk.com/Documentation/Splunk/6.5.0/Security/ConfigureSplunkToUsePAMOrRADIUSAuthentica... and read and understand the sample code. This is a several day effort at best and will require testing and such.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...