Security

Splunk with SAML authentication

splunkgk
Path Finder

Hi,

I am configuring Splunk access control with SAML onelogin and I have uploaded the onelogin IdP meta data file to splunk. After configuration splunk app is redirecting to onelogin login page. But getting a message like

"Federation Exception: Missing Assertion Consumer Service URL. Please contact your administrator."
Does any one know how do i get Consumer URL for splunk ?

-thanks

Tags (1)

aaron_gibby
Engager

Is the AuthNRequest signed? For some reason, Splunk does not include the ACS URL in unsigned assertions.

In your authentication.conf file, set the following attribute:

[<saml-authSettings-key>]
signAuthnRequest = true

 

0 Karma

suarezry
Builder

It's in your splunk SP metadata:
https://yoursplunk.yourfqdn.ca:8000/saml/spmetadata

Look for the following tag:

<md:AssertionConsumerService  Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"  Location="https://yoursplunk.yourdomain.ca/saml/acs"  index="0">
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...