mirror of
https://github.com/Ylianst/MeshCentral.git
synced 2024-12-26 23:25:53 -05:00
adfs_sso formatting
This commit is contained in:
parent
cef427d3c7
commit
18d4873ef2
@ -9,22 +9,32 @@ The following guide was built under the assumptions that:
|
||||
|
||||
The guide was built to deal specifically with adding mesh as a Relying Party. I’m far from an ADFS expert and some configurations may not be needed. Most of this was built by reading the code and taking guesses as to the needed values.
|
||||
|
||||
## Guide
|
||||
|
||||
As with anything SSO, you need 2 pieces – the IDP setup (in this case ADFS) and the SP setup (in this case Mesh).
|
||||
Mesh Setup:
|
||||
|
||||
### Mesh Setup:
|
||||
|
||||
Add the following to your mesh config file in the domains part:
|
||||
|
||||
![](images/adfs_sso2022-05-16-23-24-54.png)
|
||||
|
||||
Callback URL: Should be the FQDN for your Mesh Server, ending with /auth-saml-callback
|
||||
`Callback URL`: Should be the FQDN for your Mesh Server, ending with /auth-saml-callback
|
||||
|
||||
Entity ID: This is how ADFS IDs which party the request goes to. You can set this to whatever you want, but you will need this value later on when working in ADFS.
|
||||
`Entity ID`: This is how ADFS IDs which party the request goes to. You can set this to whatever you want, but you will need this value later on when working in ADFS.
|
||||
|
||||
IDP URL: This is the URL to ADFS. Ends with /adfs/ls unless you did something very weird in ADFS.
|
||||
`IDP URL`: This is the URL to ADFS. Ends with /adfs/ls unless you did something very weird in ADFS.
|
||||
|
||||
Cert: You will need to export the token signing cert from ADFS, then convert it to PEM format. This cert can be found in ADFS -> Service -> Certificates. You can use this openssl command to convert it from CRT to PEM format: openssl x509 -in mycert.crt -out mycert.pem -outform PEM
|
||||
`Cert`: You will need to export the token signing cert from ADFS, then convert it to PEM format. This cert can be found in `ADFS -> Service -> Certificates`. You can use this openssl command to convert it from CRT to PEM format:
|
||||
|
||||
```
|
||||
openssl x509 -in mycert.crt -out mycert.pem -outform PEM
|
||||
```
|
||||
|
||||
Save the config and restart the mesh server.
|
||||
|
||||
### Windows Server Configuration
|
||||
|
||||
ADFS setup (in pictures):
|
||||
|
||||
Relying Party Trust -> New Relying Party Trust
|
||||
|
Loading…
Reference in New Issue
Block a user