splunk SSO configuration

[martinnepolean]

We are working to integrate splunk with IDAM for SSO. WE have three splunk search head cluster for three set of users  groups. On checking the splunk metadata file, IDAM engineer is telling that all three environments has same entity ID and we need to change it to differentiate between the clusters. Please let me know how to do it.

[dmacintosh_splu]

The documentation covers a number of vendors specifically, please refer to one if it matches your vendor. If not, generally you will find it in the authentication.conf file used in this configuration. entityId is a parameter avaialble and should be the same among members of the same SHC to use smooth single logout. Each SHC entityId used is the change you asked about. 

https://docs.splunk.com/Documentation/Splunk/8.0.6/Security/ConfigureSAMLSSO#Configure_SSO_using_SAM...

[martinnepolean]

Thanks for the reply but this link doesn't give any information about changing the entityid of the splunk

[inventsekar]

Hi @martinnepolean 

this blog is about okta saml, but, it got some info about the entityID.. pls check it.. thanks.

https://www.splunk.com/en_us/blog/cloud/configuring-okta-saml-single-sign-on-with-splunk-cloud-using...

[martinnepolean]

@inventsekar This link doesn't have any information for changing entityID of the splunk