search

kolide / fleet

A flexible control server for osquery fleets
https://kolide.com/fleet
MIT License
1.1k stars 260 forks source link

Allow programmatic user management #2306

Closed zwass closed 4 years ago

zwass commented 4 years ago

Users often want to be able to manage Fleet users without configuring email, or programmatically.

Proposal: Add support for admin users to add a user and retrieve the invitation URL via fleetctl.

anelshaer commented 4 years ago

that would be great, specially if it can take a single user or a list of users to create/delete/update like csv file.

jalseth commented 4 years ago

Strong +1 to this, we would like to programmatically sync users from our IDP into Fleet and then they can sign in via SAML SSO.

As a tangentially related point for the need for this, I invited a new user to my instance today and Gmail marked the email as potential phishing, despite it coming from an authenticated user in the same domain and passing SPF, DKIM, and DMARC checks. This warning was shown to the user:

This message seems dangerous
Many people marked similar messages as phishing scams, so this might contain unsafe content. Avoid clicking links, downloading attachments, or replying with personal information.