I am using SSO and I want to be able to edit the error message you get when SSO authenticates, but the user account you is not authorized to use Splunk. I get the following error message:
IDP failed to authenticate request. Status Code="Responder,RequestDenied" Check splunkd.log for more information about the failure.
I would like to be able to change this message to something that tells the end users to contact me. Does anyone know where this error message lives?