Security

SSO mode permissive but 401 Unauthorized when accessing with an unknown user

Engager

Hello Everyone,

We are facing with an issue with our Splunk configuration : We have currently configured Splunk to accept connections in a permissive way (with SSOMode=permissive in the web.conf config file).
This actually works fine, and we are correctly redirected to the login page when accessing with a non trusted ip.
The problem is, when we are accessing with a trusted ip and a unknown user in splunk, it shows us an "Unauthorized" message, and rejects us with a 401.

Is there a way not to reject the connection, and instead show the login page is the user is unknown just as the non-trusted ip case ?

Thanks,

0 Karma
1 Solution

Motivator

Not really with SSO. You might be able to redirect to this page.

http://splunkweb:port/en-US/account/login/loginType=Splunk

View solution in original post

Motivator

Not really with SSO. You might be able to redirect to this page.

http://splunkweb:port/en-US/account/login/loginType=Splunk

View solution in original post

Engager

Adding this to the web.conf solved the issue. Thanks

0 Karma