kolide / fleet

A flexible control server for osquery fleets
https://kolide.com/fleet
MIT License
1.1k stars 261 forks source link

How do you disable authentication for the Fleet Web UI? #2115

Open EdBab opened 4 years ago

EdBab commented 4 years ago

Output from "fleet version" - > 2.3.0-2-ga688b5cf-dirty

I've been looking everywhere online and through the documentation and have not determined how to disable the fleet server authentication mechanism

I have a custom SSO solution that does not require the app to have any knowledge of it, but I need Fleet's solution to not interfere

Any help would be appreciated

zwass commented 4 years ago

There's no way to do this without making code changes. You might be able to do it by removing the authenticatedUser middleware in https://github.com/kolide/fleet/blob/master/server/service/handler.go#L137, but this would break things in other places where an authenticated user is expected in the code.

The standard way to do SSO with Fleet is SAML with an identity provider.