Modify or remove role mappings

When you configure your Splunk platform deployment to use SAML as an authentication scheme, you can authorize groups on your SAML identity provider to log in by mapping them to Splunk user roles. You can map multiple groups to a single user role.

You can also remove roles from existing groups or delete groups entirely. To remove an individual user from a SAML group, consult your IdP documentation.

1. In the Settings menu, select Authentication methods.
2. Select SAML as your authentication type.
3. Click Configure Splunk to use SAML.
4. To delete an entire group click Delete for the group you want to remove.
5. On the SAML Groups page, click Edit for a group you want to modify.
6. Specify the roles that you want to remove from this group by moving the desired roles from the right column to the left column.
7. Click Save.