MyFavMirrors/MeshCentral
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshCentral.git synced 2024-12-26 23:25:53 -05:00
Code Issues Packages Projects Releases Wiki Activity

adfs_sso formatting

Browse Source
This commit is contained in:
silversword411 2022-05-16 23:36:31 -04:00
parent cef427d3c7
commit 18d4873ef2
1 changed files with 15 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
docs/docs/other/adfs_sso_guide.md
View File

@ -9,22 +9,32 @@ The following guide was built under the assumptions that:
The guide was built to deal specifically with adding mesh as a Relying Party. I’m far from an ADFS expert and some configurations may not be needed. Most of this was built by reading the code and taking guesses as to the needed values. The guide was built to deal specifically with adding mesh as a Relying Party. I’m far from an ADFS expert and some configurations may not be needed. Most of this was built by reading the code and taking guesses as to the needed values.
## Guide
As with anything SSO, you need 2 pieces – the IDP setup (in this case ADFS) and the SP setup (in this case Mesh). As with anything SSO, you need 2 pieces – the IDP setup (in this case ADFS) and the SP setup (in this case Mesh).
Mesh Setup:
### Mesh Setup:
Add the following to your mesh config file in the domains part: Add the following to your mesh config file in the domains part:
![](images/adfs_sso2022-05-16-23-24-54.png) ![](images/adfs_sso2022-05-16-23-24-54.png)
Callback URL: Should be the FQDN for your Mesh Server, ending with /auth-saml-callback `Callback URL`: Should be the FQDN for your Mesh Server, ending with /auth-saml-callback
Entity ID: This is how ADFS IDs which party the request goes to. You can set this to whatever you want, but you will need this value later on when working in ADFS. `Entity ID`: This is how ADFS IDs which party the request goes to. You can set this to whatever you want, but you will need this value later on when working in ADFS.
IDP URL: This is the URL to ADFS. Ends with /adfs/ls unless you did something very weird in ADFS. `IDP URL`: This is the URL to ADFS. Ends with /adfs/ls unless you did something very weird in ADFS.
Cert: You will need to export the token signing cert from ADFS, then convert it to PEM format. This cert can be found in ADFS -> Service -> Certificates. You can use this openssl command to convert it from CRT to PEM format: openssl x509 -in mycert.crt -out mycert.pem -outform PEM `Cert`: You will need to export the token signing cert from ADFS, then convert it to PEM format. This cert can be found in `ADFS -> Service -> Certificates`. You can use this openssl command to convert it from CRT to PEM format:
```
openssl x509 -in mycert.crt -out mycert.pem -outform PEM
```
Save the config and restart the mesh server. Save the config and restart the mesh server.
### Windows Server Configuration
ADFS setup (in pictures): ADFS setup (in pictures):
Relying Party Trust -> New Relying Party Trust Relying Party Trust -> New Relying Party Trust