By: Vignesh Naidu user 26 Apr 2020 at 4:35 p.m. CDT

2 Responses
Vignesh Naidu gravatar
Hello, I am trying to setup SAML integration for Splunk and I am doing a POC so that I can propse this for a Client. I am stuck at the start itself. I could do for OKTA as they have doc for it, I like GLUU but for this I am having confusion in setup, I need some help.! ### Error Adding a Trust Relationship Form I downloaded & added the SpMetadata XML from Splunk & browsed in Trust Relationship form and the :below error occured `Metadata Validation Log. Error of schema creating Warning: cannot validate metadata. Check internet connetion ans www.w3.org availability. Warning: Error of schema creating Warning: src-resolve: Cannot resolve the name 'resolver:BasePrincipalConnectorType' to a(n) 'type definition' component. src-resolve: Cannot resolve the name 'resolver:BasePrincipalConnectorType' to a(n) 'type definition' component. ` - I could also see the oxtrust log says `ERROR [ForkJoinPool.commonPool-worker-1] [org.opensaml.xml.parse.LoggingErrorHandler] (LoggingErrorHandler.java:44) - XML Parsing Error:` - I am not sure if the problem is with the Splunk SP metadata xml the below is the XML (**NOTE**: I purposely added 1234, else the xml stanza disappears) ```<1234?xml version="1.0" encoding="utf-8"?>```<md:EntityDescriptor entityID="http://192.168.0.201:8000/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"><md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAssertionsSigned="true"><md:KeyDescriptor><ds:KeyInfo><ds:X509Data><ds:X509Certificate> MIIDMjCCAhoCCQDjhSYKjETNETANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJV UzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoM BlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEW EnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0xOTExMTgxNTQxMDlaFw0yMjExMTcxNTQx MDlaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQK DApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Htr T3LoChTCPaaaHMP5Go7d54odvZHd07N7XC9QeF7ounG1eS8dU4njGazoy9RYXDxl jdFuHv+Wv+O/SRSiCCCAVcdJzYol4Pox0A+dbnLN5lT54tLUlxGHYajVrGDhunLJ 7JBZYZY/eund8GP8gmHF6xAHZvZbhlPgGMt08j1Fv8ycuvC9YbZzftUzKKYPihZU PODDlBq9zLPRhshBIIltLjbVkgyGaojXLjWk0eg9holEQ5nM7xUKtCU1kkpM0oqu /mWJ/pcKsJs1UrprUUouPHMbxopUJkKah4H3zr1/eOwWtAzOx+BnsB5UaWV/ZrBM 5bUIHhYd1c2HVlmeqQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQB99tmHHUo6LgjE Wn2epOWbT8JP6z9jSOlEBcP+F4uX4EUYQAOF+oMMcPrAXzvqt4xfqDellEEmyls5 dyHmh12BBYRuxkHYHP59bXn/ZRd07+9XAP6k0OIVaksRuRkuWEy+r1V65pEWIgBp W7egf2tFo3L7mNVWxFH3xfBx+7pyUE+JsSqeb2A1kQiECtEWvkaOC61NmGcR4olF yBlHWclAAX3GJ3fUGBjMYPMo5T9Dh/4QflxI7UrEMqZV2hysUvhT1u0YvqtsyGpG kPPTGa+ZwdOT3BZCifUGLEBxEjpnkt9vzIETW+1L57EH/iKN5m5f0shBKBAAOjGH vSKsNG7e </ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://192.168.0.201:8000/saml/logout" index="0"></md:SingleLogoutService><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.bindings:HTTP-POST" Location="http://192.168.0.201:8000/saml/acs" index="0"></md:AssertionConsumerService></md:SPSSODescriptor></md:EntityDescriptor> - **NOTE:** I added the first stanza in the above xml, watching the Salesforce gluu integration [video](https://www.youtube.com/watch?v=0qQimGWi3_8), as it was missing in the original xml from Splunk. **```<1234?xml version="1.0" encoding="utf-8"?>```** (**NOTE**: I purposely added 1234, else the xml stanza disappears) - Also I tried to reset XML and I am not able to figure out where exactly am I going wrong. Any help will be appreciated.

By Sahil Arora user 27 Apr 2020 at 10:44 a.m. CDT

Sahil Arora gravatar
Hi Vignesh, This SAML metadata validation is a [known](https://github.com/GluuFederation/oxTrust/issues/1928) error and the fix has been applied in 4.1.1 which is into final stages of QA. But this validation error shouldn't prevent you from SAML login. You can use the attached metadata and test login with Splunk. Let me know in case of any issues.

By Sahil Arora user 04 May 2020 at 8:56 a.m. CDT

Sahil Arora gravatar
Hi Vignesh, Let me know should you need further assistance on this. Regards Sahil