Cloud Management and AIOps


This is an IBM Automation portal for Cloud Management, Technology Cost Management, Network Automation and AIOps products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).

Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.

Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Not under consideration
Workspace Instana
Categories Access Control
Created by Guest
Created on Sep 15, 2025

RELATED IDEAS

Monitor the SAML attempts and notify on specific failures

Case: TS020088958

In reference to identity provider (IdP), in reference to single-sign-on SAML failures, such as sign-in-request failed, took too long, received an error message, each of these events should be in an audit log.

  1. Software Self

    1. Have IBM Instana ingest the SAML, user audit log and provide event sensing and alerting/notification

  2. Out side of Instana

    1. Provide an API to poll for the SAML log events

  3. Emitting

    1. Have a SNMP interface that will send out SAML events

  4. Passive

    1. After an IdP failure, and using an API token/script to delete the SAML, be able to go into the SAML section and review previous state such as who, what, when, how, why, where. That might be access to the Instana operational logs that contain the SAML events.

  5. Synthetic Monitoring - Third Party

    1. Provide a status page which can be accessed via URL on the state of the Instana instance including the state of SAML

The primary use case, would be that the communication between IBM Instana tenant and the IdP or the IdP is down, and without the IdP, would have to already prepared an API token in order to delete the SAML to then be able to log into Instana tenant to determine what is going on.

Idea priority High
  • Admin
    Máté Návay
    Oct 2, 2025

    As we support a generic SAML and OIDC integration we don't have a standard way to monitor the IdP status from Instana.

    We also only ever get the browser session returned to Instana when the user is successfully authenticated and check for authorization, so failed logins or long responses are not visible for Instana in anyway. Hence we also cannot assume in any way, that an IdP is "down" or if it would be an appropriate action to disable the IdP configuration, as that would open up password authentication, potentially circumventing strong password and 2FA requirements enforced through the IdP.

    Having an API token prepared for self-servicing option to disable IdP/SAML configs is recommended in the docs, so having to contact support to do this for you can be avoided.

    Reply

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.