Security

Is there any way we can pull which all SAML group names are configured in Splunk?

pkolhatk
Explorer

Is there any way we can pull which all SAML group names are configured in Splunk

or Is there any way we can get which roles are assigned to which SAML group in Splunk

 

 

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Try these REST commands.

| rest /services/admin/SAML-groups
| rest /services/admin/SAML-user-role-map
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The first REST command maps SAML group to Splunk role.

| rest /services/admin/SAML-groups
| table title roles
---
If this reply helps you, Karma would be appreciated.
0 Karma

pkolhatk
Explorer

Thank you for your help I can see the group now. I was trying to configure dashboard where I can see the roles mapped to the SAML group can you suggest anything for the same.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try these REST commands.

| rest /services/admin/SAML-groups
| rest /services/admin/SAML-user-role-map
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...