Security

IDP failed to authenticate request.

mcullen4
New Member

A selection of users in Bogota, Colombia are getting:
IDP failed to authenticate request. Status code="Responder" Check splunkd.log for more information about the failure.

Multiple users here in Raleigh, NC can access the logs fine.

I have read several articles indicating this is an SSO issue
But we are not doing SSO with Splunk

I do not know how to look at this splunkd.log either

Tags (1)
0 Karma

nickhills
Ultra Champion

Open a ticket - its likely an issue on Splunks side

If my comment helps, please give it a thumbs up!
0 Karma

nickhills
Ultra Champion

Is this Splunk Cloud?

If my comment helps, please give it a thumbs up!
0 Karma

mcullen4
New Member

Yes, this is spunk Cloud

0 Karma

rajasekhar14
Path Finder

what is your authentication method?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...