Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 11 additions & 10 deletions website/integrations/monitoring/splunk-enterprise/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ import Tabs from "@theme/Tabs";
The following placeholders are used in this guide:

- `authentik.company` is the FQDN of the authentik installation.
- `splunk.company` is the browser-facing FQDN of the Splunk Enterprise instance. Include a port in this value only if users include that port when they open Splunk Enterprise.
- `splunk.company` is the browser-facing FQDN of the Splunk Enterprise instance.

:::info
This documentation lists only the settings that you need to change from their default values. Be aware that any changes other than those explicitly mentioned in this guide could cause issues accessing your application.
Expand Down Expand Up @@ -173,14 +173,15 @@ Splunk maps values from the SAML `role` attribute to Splunk roles. The authentik
1. Log in to Splunk Enterprise with a local administrator account.
2. In the Splunk bar, navigate to **Settings** > **Users and authentication** > **Authentication methods**.
3. Click **Configure Splunk to use SAML**.
4. In the top right, click **New Group**.
5. Configure the mapping:
4. If the **SAML Configuration** dialog opens, click **Cancel** to return to the SAML groups page.
5. Click **New Group**.
6. Configure the mapping:
- **Group name**: enter the authentik application entitlement name, for example `splunk-user`.
- **Splunk roles**: select the Splunk role or roles to assign, for example `user`.
6. Click **Save**.
7. Repeat these steps for each Splunk role entitlement.
7. Click **Save**.
8. Repeat these steps for each Splunk role entitlement.

:::note
:::note Auto-mapped roles
Splunk can auto-map SAML role values to local Splunk roles with the same name. Explicit group mappings are recommended because they make authorization easier to review and avoid accidentally granting roles when an entitlement name matches a Splunk role.
:::

Expand All @@ -190,7 +191,7 @@ To verify SAML login, navigate to the authentik User interface and click the Spl

## Resources

- [Splunk Enterprise Documentation - Configure SSO with Okta as your identity provider](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.0/use-saml-as-an-authentication-scheme-for-single-sign-on/configure-sso-with-okta-as-your-identity-provider)
- [Splunk Enterprise Documentation - Configure SAML SSO for other IdPs](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.0/use-saml-as-an-authentication-scheme-for-single-sign-on/configure-saml-sso-for-other-idps)
- [Splunk Enterprise Documentation - Map groups on a SAML identity provider to Splunk roles](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.0/use-saml-as-an-authentication-scheme-for-single-sign-on/map-groups-on-a-saml-identity-provider-to-splunk-roles)
- [Splunk Enterprise Documentation - Troubleshoot SAML SSO](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.0/use-saml-as-an-authentication-scheme-for-single-sign-on/troubleshoot-saml-sso)
- [Splunk Enterprise Documentation - Configure single sign-on with SAML](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/use-saml-as-an-authentication-scheme-for-single-sign-on/configure-single-sign-on-with-saml)
- [Splunk Enterprise Documentation - Configure SAML SSO for other IdPs](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/use-saml-as-an-authentication-scheme-for-single-sign-on/configure-saml-sso-for-other-idps)
- [Splunk Enterprise Documentation - Map groups on a SAML identity provider to Splunk roles](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/use-saml-as-an-authentication-scheme-for-single-sign-on/map-groups-on-a-saml-identity-provider-to-splunk-roles)
- [Splunk Enterprise Documentation - Troubleshoot SAML SSO](https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/use-saml-as-an-authentication-scheme-for-single-sign-on/troubleshoot-saml-sso)
Loading