Splunk Enterprise

Changing from ProxySSO authentication to SAML

phamanth
Explorer

Inherited Splunk deployment.  Looks like authentication was setup with proxysso.  I am unfamiliar with this and we are planning on migrating the proxysso authentication to SAML.  
In the past, I have used the web UI for authentications like LDAP.  ProxySSO seems to be a backend conf file?

Not sure on how to proceed if there will be a conflict of just adding the SAML authentication method and will it simply override the ProxySSO configurations? 

Or does the ProxySSO conf need to be removed first and then saml configured?  If that is the case, what methods to remove?

Thank you

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

I propose that you set up a test/lab system to test and document this change. There are some things which you need check and test.

  • Are you using REST api for current users? This works differently with SAML users
  • How you avoid that used user accounts / userIDs didn't change or if those have change, how to migrate
    • users private KOs
    • users schedules
    • something else which are depending on userID
  • Are you need CLI access with your old LDAP users. This didn't work with SAML account or at least it needs some additional scripts or something else?
  • Probably something else depending on which SAML idP you are using?

r. Ismo

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...