Alloy blackbox exporter for http probe URL with SSO monitoring

Grafana Alloy
1

Hi,

I am using the Alloy blackbox exporter for http probe URL monitoring and we have got a requirement that few URLs have SSO implementation of SAML and oAuth2.0 and don’t find the way to achieve it in Alloy or Blackbox Exporter documentations, can you please guide me on how to achieve the monitoring the URLs with SSO.

Thanks,
Ravi

2

If you are using 2FA with your SSO authentication then it’s not possible.

I would try:

  1. Monitor the endpoint behind SSO directly. I am not sure what your infrastructure looks like, this may or may not be possible.
  2. Create some sort of service account or API key from your SSO so you can bypass 2FA. Make sure you have security policy to lock this down (for example only allow from your corp network or Alloy IP).
3

Hi,
Thanks for the response. I am using the AzureAD with oAuth ,so it redirects to the following page as part of authorization…

https://login.microsoftonline.com/....../oauth2/v2.0/....authorize?client_id=.....&code_challenge=....&code_challenge_method=......d&response_type=code&scope=openid+email+profile+offline_access&.

can we see any approach to get it through for http probe request

4

You might have a better chance getting an answer from Azure community or support. I don’t use Azure personally so I am not sure.