Can I log in to Splunk Web from credentials entered on an external webpage?

[lquinn]

I have a webpage where users enter their username and password to view their profile. I would like to include some code in this webpage so that users are also automatically logged into Splunk with the same credentials. Then when the users are redirected to Splunk Web, they will bypass the login screen. Does anyone know the best way to do this?

I have got the insecure login method to work, however I do not want to pass the username and password through the URL. I also looked at the documentation for adding Splunk to your own web apps using JSStack, but that's not really what I want to do. I just want the relevant cookies to be saved from my own login page. Is this possible?

[acharlieh · Accepted solution]

There's a feature that's been around since 4.1 called SplunkSSO, where you put SplunkWeb behind a proxy. Your proxy server would authenticate the user somehow (be it through shared sessions or the cookies or whatnot), and pass "This is the username you need to use" back to SplunkWeb (who is configured to trust such assertions from only the proxy servers).

You need to have all of the users available to Splunk already (if the proxy passes a user that doesn't exist in Splunk it doesn't work so well).

Blog: http://blogs.splunk.com/2010/04/05/sso-splunk-without-the-mess/
Docs: http://docs.splunk.com/Documentation/Splunk/6.2.4/Security/HowSplunkSSOworks