Is it possible to use SSO metadata to set user timezone?

[jmyers]

Is it possible to set Splunk's timezone for each user based on their metadata in their SSO profile they use to log into Splunk?

I'm pretty sure I can automate this information on the SSO side in a way that I can't using role-based configurations in Splunk (why can't roles have default timezones???), the only issue is getting Splunk to accept the timezone value.

Using Splunk Cloud, currently on 8.2.something
Thanks!

[richgalloway · Accepted solution]

Splunk only collects group membership information from SSO providers.  You may be able to script something using the REST API, however.  See https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTREF/RESTaccess#authentication.2Fusers.2...

Roles don't have default timezones because users in the same role are not necessarily in the same area.