I have configured Splunk with SAML (ADFS) but We are facing an issue during logout, with the following error message: "Failed to validate SAML logout response received from IdP
I have inserted the below URL in logout in SAML configuration " https://my_sh:8000/saml/logout"
how can I overcome this issue??
I'm not sure if that URL is correctly written in your post, but the 8000 is a port, not a part of the path. E.g. "https://my_sh:8000/saml/logout"
If that is not the issue, could you try searching your internal logs for keywords like "Saml" or "samlresponse"? Perhaps there will be a more detailed error message.
index=_internal SamlResponse