My organization recently updated to SAML for Splunk and I am no longer able to connect to Splunk via the Python SDK. Whenever I try and connect I receive "AuthenticationError: Login failed."
I am trying to connect using the method outlined in the "How to run searches and jobs using the Splunk SDK for Python" post that Splunk published.
Am I doing something incorrectly? Or does the Splunk SDK not support SAML?
Anyone mange to find an answer to this?
Im in the situation with splunk instance configured with SSO.
I found an article from Splunk about auth tokens: https://docs.splunk.com/Documentation/Splunk/9.0.2/Security/UseAuthTokens
Looks like a Splunk admin would be able to create an API token for your account and you could authenticate with the token, like so: https://docs.splunk.com/DocumentationStatic/PythonSDK/1.7.2/client.html?highlight=session#splunklib....
I will have this implemented in my environment and update this post if it worked.