Azure AD integration with Splunk

[sivakrishna]

Hello Team,

We tried to integrate our Splunk enterprise LB URL using SAML authentication. We gave details such as Entity ID, LB URL, and Reply URL, and they generated metadata (XML), which we then uploaded to Splunk. After configuration, we received the following error.

Please find the below SS error FYR.

Could you please assist us with the mentioned integration part
Please let us know if you need any other information.

Regards,
Siva.

[Pratyush]

@sivakrishnaHave you assigned the user to a group in Azure AD and mapped that group to a role in Splunk?

[sivakrishna]

Hi @Pratyush,

yes, Azure team has assigned a user to the groups they have created, and we have mapped that group with Splunk

[kiran_panchavat]

@sivakrishna Hello Siva, Refer the below documents 

https://community.splunk.com/t5/Security/Why-does-Saml-response-not-contain-group-information/m-p/41... 

https://community.splunk.com/t5/Security/quot-Saml-response-does-not-contain-group-information-quot-...