• In the Splunk Cloud dashboard, click Settings > Authentication methods

• Name: Set any name
• Choose an application type: Select "Regular Web Applications"

• Application Callback URL: URL to send SAML assertions to SP after authentication
• nameIdentifierFormat: NameID format (specify email address)
• nameIdentifierProbes: Values to use for NameID (specify email address value)
• callback: URL to which Auth0 requests logout
• slo_enabled(true): Request logout to SP side when logging out on IdP side
• signatureAlgorithm: Signature algorithm to use for SAML Assertion/Response (specify RSA-256)
• signingCert: Public key certificate used to validate SAML Request

{
  "nameIdentifierFormat":"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
  "nameIdentifierProbes": [
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  ],
  "logout": {
    "callback": "{SingleLogoutService > Location > URLにて取得した値}",
    "slo_enabled": true
  },
  "signatureAlgorithm": "rsa-sha256",
  "signingCert": "-----BEGIN CERTIFICATE-----\n{X509Certificateの中身}\n-----END CERTIFICATE-----\n"
}

• Name: Set any name
• Script: Describe the process of embedding the login user's role information in the SAML response

function (user, context, callback) {
	// Get the user roles from the Authorization context
	const assignedRoles = (context.authorization || {}).roles;
	// Update the user object.
	user.rolez = assignedRoles;
	callback(null, user, context);
}

• set entity id
  * Set the value of the Entity ID described in the SP metadata obtained in "1. Splunk Cloud Settings (1) (SAML SP)"
• Role Alias: http://schemas.auth0.com/rolez
  *Role aliases defined in the Auth0 Rules function in "2. Auth0 Settings (SAML IdP)"
• Alias for RealName: http://schemas.auth0.com/nickname
• Email alias: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

• Group Name: Same name as the corresponding Auth0 role
• Splunk role: select the Splunk role to assign