Splunk sends hostname in SAML Request

[benkummer]

We are configuring SAML Authentication in splunk.

We set up everything but splunk sends an SAMLRequest starting with trailing number because the hostname of the system is  1ourhostname. 

<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest ID="1ourhostname..1.6E4A85A3-6AC1-4CC3-A9 

The id Provider rejects the request because an id starting with numbers is incorrect.

What i tried set fqdn to  the web url  in both server.conf general  and in the saml secttion in authentication.conf . That does not change the saml request. Any ideas?

authentication.conf: 

[saml]

fqdn = splunk-test.system.local

server.conf: 

[general]
serverName=splunk-test.system.local
fqdn = splunk-test.system.local

[livehybrid · Accepted solution]

Hi @benkummer 

I would try and set the entityId value in the saml configuration of authentication.conf (see https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/configuration-file-referen...)

[samlv2]
entityId = yourServerNameWithoutNumericalPrefix

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful

• Marking it as the solution if it resolved your issue

• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

[benkummer]

Hi @livehybrid ,

thank you very much  that worked. 

In my configuration this value was  the url  to the metatada of the IDP before.

Cheers,
Ben