Splunk Auth questions

Deployment Architecture

Hi, we are using splunk 8.0.6 with LDAP authentication in a SHC, and with a few local splunk users.

We would be adding MFA (RSA) soon. My question is, how will the local users be tied to the RSA MFA, and will it be possible to only exclude local splunk users from MFA?

Does RSA support SAML authentication, should I change from using LDAP to SAML if it does, and ultimately my intention is to exclude local users from the MFA using the logontype=splunk in url.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...