Getting Data In

Can I log in to Splunk Web from credentials entered on an external webpage?

lquinn
Contributor

I have a webpage where users enter their username and password to view their profile. I would like to include some code in this webpage so that users are also automatically logged into Splunk with the same credentials. Then when the users are redirected to Splunk Web, they will bypass the login screen. Does anyone know the best way to do this?

I have got the insecure login method to work, however I do not want to pass the username and password through the URL. I also looked at the documentation for adding Splunk to your own web apps using JSStack, but that's not really what I want to do. I just want the relevant cookies to be saved from my own login page. Is this possible?

0 Karma
1 Solution

acharlieh
Influencer

There's a feature that's been around since 4.1 called SplunkSSO, where you put SplunkWeb behind a proxy. Your proxy server would authenticate the user somehow (be it through shared sessions or the cookies or whatnot), and pass "This is the username you need to use" back to SplunkWeb (who is configured to trust such assertions from only the proxy servers).

You need to have all of the users available to Splunk already (if the proxy passes a user that doesn't exist in Splunk it doesn't work so well).

Blog: http://blogs.splunk.com/2010/04/05/sso-splunk-without-the-mess/
Docs: http://docs.splunk.com/Documentation/Splunk/6.2.4/Security/HowSplunkSSOworks

View solution in original post

acharlieh
Influencer

There's a feature that's been around since 4.1 called SplunkSSO, where you put SplunkWeb behind a proxy. Your proxy server would authenticate the user somehow (be it through shared sessions or the cookies or whatnot), and pass "This is the username you need to use" back to SplunkWeb (who is configured to trust such assertions from only the proxy servers).

You need to have all of the users available to Splunk already (if the proxy passes a user that doesn't exist in Splunk it doesn't work so well).

Blog: http://blogs.splunk.com/2010/04/05/sso-splunk-without-the-mess/
Docs: http://docs.splunk.com/Documentation/Splunk/6.2.4/Security/HowSplunkSSOworks

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...