I get an error when applying the SAML Config in splunk (but I am an admin and should have the permission):
"You do not have permission to perform this operation (requires capability: change_authentication)."
If I then go to to splunk home page I get:
"The app "None" is not available"
If I go to the Okta portal shortcut I then get:
"No valid splunk role found in the local mapping or assertion."
My mapping in auth.conf:
admin = Splunk Admins
which is the group in AD and group in Okta that gives access to Splunk
... View more