Security

Does CLI authentication per LDAP work while web authentication per SAML is activated?

DennisFFM
Explorer

We switched our Splunk web authentication from LDAP to SAML.

Now when I for example try to "apply cluster-bundle", I can't authenticate myself with my LDAP credentials anymore,
only with the local Splunk admin.

Is there a way to configure the CLI authentication to use LDAP while the web authentication works with SAML?

0 Karma
1 Solution

mtulett_splunk
Splunk Employee
Splunk Employee

No unfortunately, as the authentication system is the same for both internally.

I would recommend creating a local admin user for each administrator, using something like DennisFFM_admin, vs your normal DennisFFM account. This way you can have local authentication on the cluster with auditing tied to the user, but still log into the web interface with SSO.

View solution in original post

0 Karma

mtulett_splunk
Splunk Employee
Splunk Employee

No unfortunately, as the authentication system is the same for both internally.

I would recommend creating a local admin user for each administrator, using something like DennisFFM_admin, vs your normal DennisFFM account. This way you can have local authentication on the cluster with auditing tied to the user, but still log into the web interface with SSO.

0 Karma

DennisFFM
Explorer

Hi @mtulett, thank you for your answer.

I think that's actually the best way to do it.
I hope there will be a possibility in the future to configure a different authentication system for CLI users.

Cheers!

Dennis

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...