Splunk ProxySSO – Logout or session time-out redirection not working as expected


We have a Splunk cluster setup configured to use ProxySSO. Our LB is playing role of Proxy server and it passes all the required credentials, group Info, user identity etc. to the Splunk Web through HTTP headers. After getting this information Splunk properly authenticates and displays expected dashboards using appropriate authorization.

The issue comes when user either clicks the Logout option of Splunk OR session timeout happen due to in-activity. The expectation is - Splunk should redirect to the URL as configured in Proxy server but actually the redirection doesn’t work and after logging out the Splunk Login page is displayed. Proxy server URL is configured to property redirectAfterLogoutToUrl under [ssosettings] stanza. But its not working. We want to redirect the user to a separate page but ends up in displaying Splunk Login page.

How to configure this with ProxySSO authentication method?


Tags (2)


Here are the configurations I am using:
[root@searchead01 local]# cat web.conf
updateCheckerBaseURL = 0
enableSplunkWebSSL = true
splunkdConnectionTimeout = 10800
sslVersions = *,-ssl2,-ssl3,-tls1.0,-tls1.1
cipherSuite = TLSv1.2:!eNULL:!aNULL
ecdhCurves = prime256v1,secp384r1,secp521r1
dhFile = /opt/splunk/etc/auth/splunkweb/dh2048.pem
allowSslCompression = false
enableWebDebug = true
x_frame_options_sameorigin = False
remoteUser = REMOTE_USER
remoteGroups = REMOTE_GROUPS
remoteUserMatchExact = 0
remoteGroupsMatchExact = 0
SSOMode = strict
trustedIP =,

[root@searchhead01 local]# cat authentication.conf
authType = ProxySSO
authSettings = ssosettings


idpSLOUrl = https://Path/To/Custom/logout.html

redirectAfterLogoutToUrl = https://Path/To/Custom/logout.html

splunkrole1 = cn=activedirectorygroup1
splunkrole2 = cn=activedirectorygroup2
splunkrole3 = cn=activedirectorygroup3

0 Karma
Get Updates on the Splunk Community!

Welcome to the Future of Data Search & Exploration

You have more data coming at you than ever before. Over the next five years, the total amount of digital data ...

What’s new on Splunk Lantern in August

This month’s Splunk Lantern update gives you the low-down on all of the articles we’ve published over the past ...

This Week's Community Digest - Splunk Community Happenings [8.3.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...