No valid Splunk role found in local mapping - OneLogin

[munozj]

Setting up a new deployment with OneLogin SSO.  When attempting to login using SAML, getting this error message

"No valid Splunk role found in local mapping."

In OneLogin I setup the parameter "role" to pass User Roles  (also tried MemberOf)

In Splunk I created a SAML Group called sysadmin and assigned the role admin to it.

SAML-Tracer is verifying that the 'role' attribute is being passed and the value "SysAdmin" exist in the roles assigned to the user.

[livehybrid]

Hi @munozj 

It looks from your SAML response that the role name returned is "(Manual) Role: SysAdmin" note "sysadmin" as in your role mapping. 

Splunk does support semicolon delimited roles (https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/9.3/perform-advanc...) but will use the role name as its sent, which in this case includes the extra string "(Manual) Role: " I believe.

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing