Security

Does Splunk support oAuth 2.0 single sign-on?

ankithreddy777
Contributor

Does Splunk supports oAuth2.0 based Single-Sign-on?

If it is, does it supports both LDAP and Single-sign-on authentication concurrently?

0 Karma

suarezry
Builder

Splunk does NOT support OAuth for SSO. Splunk uses SAML for SSO. However, you can put a web server (Apache, IIS, etc) in front of splunk to proxy connections through and configure that proxy to authenticate OAuth if you really want to, though I'm not sure why if you can support LDAP.

https://docs.splunk.com/Documentation/Splunk/6.5.2/Security/ConfigureSplunkSSO

Once you enable SSO you cannot login through LDAP by default.

adonio
Ultra Champion

read the question too fast!
thanks!

0 Karma

ankithreddy777
Contributor

But I can select only one authentication at a time in Access control settings.(LDAP or SAML).

0 Karma

jkat54
SplunkTrust
SplunkTrust

Correct, Splunk auth mechanisms support LDAP or SAML, not both at the same time. If you want to do LDAP and SAML, it would require some form of custom scripted authentication (which is supported by splunk).

https://docs.splunk.com/Documentation/Splunk/8.0.0/Security/ConfigureSplunkToUsePAMOrRADIUSAuthentic...

0 Karma

adonio
Ultra Champion

what is the use case? what problem are you trying to solve?

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...