Hi Splunkers,
There are two types of users in the current cloud account that I am using ie Splunk And SAML. I am new to SAML SSO authentication. Can anybody please guide me as to how to add new SAML user or how to give access to any user to Splunk Cloud through SAML?
Thanks,
BS
This is a late answer but I was in this position and could not find the answer anywhere so maybe this will document it for someone else who is searching.
If SAML SSO is already set up (as the question states) and you are using Azure AD then what you need to do is to add the users to the Azure AD group that has been created to give access to Splunk. You don't need to do anything in Splunk.
I did also do "Reload authentication configuration" under Access controls, Authentication method, but I don't think that was necessary.
The users do not appear in the Splunk user list until they have logged in.
Have you looked at the user's manual?
https://docs.splunk.com/Documentation/SplunkCloud/6.6.3/User/HowSAMLSSOworks