Security

SAML RealName Alias

thormanrd
Path Finder

I have my Search Head Cluster authentication working with SAML intergration with our IdP. But currently our IdP sends our first, last names in two different Attributes, shown below...

        <saml:Attribute Name="FirstName"
                        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
                        >
            <saml:AttributeValue xmlns:q5="http://www.w3.org/2001/XMLSchema"
                                 p7:type="q5:string"
                                 xmlns:p7="http://www.w3.org/2001/XMLSchema-instance"
                                 >FIRSTNAME</saml:AttributeValue>
        </saml:Attribute>
        <saml:Attribute Name="LastName"
                        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
                        >
            <saml:AttributeValue xmlns:q6="http://www.w3.org/2001/XMLSchema"
                                 p7:type="q6:string"
                                 xmlns:p7="http://www.w3.org/2001/XMLSchema-instance"
                                 >LASTNAME</saml:AttributeValue>
        </saml:Attribute>

Is there a way in the SAML Configuration for RealName Alias to concatenate these two attribute/values?

thormanrd
Path Finder

I tried "LastName, FirstName" in the RealName Alias of the SAML configuration but that did not work. it didn't throw an error, just came up with a blank full name field in the user's profile.

frechetta93
Explorer

Did you ever get this solved? I have the same issue.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...