IDP failed to authenticate request - No Status Code?

[hsuparta]

We are currently facing Single Sign-On issues - getting the following error.

IDP failed to authneticate request. Status Code="" Check splunkd.log for more information about the failure.

Unlike other posts - there is no status code in our error and the splunkd.log doesn't give much information.

We have logged in locally and downloaded the metadata.xml file, we confirmed that the configuration is still same as the ADFS Relaying Party Trust.

Hopefully someone can assist - thanks!

[DavidHourani]

Hi @hsuparta,

Could you provide us with more details :
-Which Splunk version are you using ?
-Include the steps you followed for configuration.
-Include an extract of the authentication.conf file.

[hsuparta]

• The version we are using is Splunk Cloud - Splunk Version 7.0.12

• We have looked at the configurations from the following KB.
  https://www.splunk.com/en_us/blog/cloud/configuring-microsofts-adfs-splunk-cloud.html

• Where can we locate the authentication.conf file if we are using Splunk Cloud?

[DavidHourani]

You can access the file via a REST call :

https://<host>:<mPort>/services/configs/conf-{file}

More details here :
https://docs.splunk.com/Documentation/Splunk/8.0.0/RESTREF/RESTconf

To access the file directly you will need to contact support.