
Next to AuthPoint certificate you will associate with your resource, click and select Download Metadata.If you have a Service Provider account, you must select an account from Account Manager. From the navigation menu, select Configure > AuthPoint.After you have the metadata file, you can configure Splunk.
To start, you must download the metadata file from the Certificate Management page in the AuthPoint management UI.
You have an AuthPoint identity provider (IdP) certificate An AuthPoint IdP certificate is required for SAML authentication. A token is assigned to a user in AuthPoint. This diagram shows the data flow of an MFA transaction for Splunk.īefore you begin these procedures, make sure that: This integration was tested with Splunk Enterprise on-premise v8.2.4 Splunk Authentication Data Flow with AuthPointĪuthPoint communicates with various cloud-based services and service providers with the SAML protocol. Your Splunk SAML user will bind with your Splunk SAML groups. For users that belong to more than one group, in Splunk you must configure SAML groups with the same name as the groups in AuthPoint. In AuthPoint, users can belong to more than one group. For this integration, we set up SAML with AuthPoint. Splunk can be configured to support MFA in several modes. Splunk must already be configured and deployed before you set up MFA with AuthPoint. #Splunk ssl certificate how to#
This document describes how to set up multi-factor authentication (MFA) for Splunk® with AuthPoint as an identity provider. Splunk Integration with AuthPoint Deployment Overview