Do not use the unofficial Splunk app you'll find on Okta. It does not work. Just make a new plain SAML app ourself as shown in the links above. ... View more

SAML assertions can be signed and/or encrypted, or neither. http://stackoverflow.com/questions/8276233/is-it-recommended-to-sign-and-encrypt-saml-and-use-ssl I do not encrypt the assertions between my IdP and splunk, nor do I see a requirement to do so. However splunk will only accept signed assertions: authentication.conf signedAssertion = [true|false] * OPTIONAL * This tells Splunk if the SAML assertion has been signed by the IDP * If set to false, Splunk will not verify the signature of the assertion using the certificate of the IDP. * Currently, we accept only signed assertions. ... View more