netbirdio / netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
11.19k stars 515 forks source link

Login Convertion #2483

Open mstaafdewit opened 2 months ago

mstaafdewit commented 2 months ago

So we use Netbird to provision new computers from our office for customers so we setup keys to bypass SSO\MFA. But we need the the user use SSO and MFA for daily use.

For Netbird to be reset back to SSO after we are done setting up the device, we have to uninstall it and remove the files in c:\programdata\netbird and then we reinstall.

Can we get a command to reset the login method, something like.

.\netbird.exe down --remove-setup-key

and it would be nice to have an value on the status command like.

OS: windows/amd64
Daemon version: 0.28.4
CLI version: 0.28.4
Auth: [ Key | Login ]      <----
Management: Disconnected
Signal: Disconnected
Relays: 0/0 Available
Nameservers: 7/8 Available
FQDN:
NetBird IP: N/A
Interface type: N/A
Quantum resistance: false
Routes: -
Peers count: 0/5 Connected
pascal-fischer commented 2 months ago

Hi @mstaafdewit, we had a discussion a while ago about some profile switching capabilities for the clients which would allow you to have multiple profiles on the same machine, you could have one for the user SSO and one for the setup key. The users then could switch beween both. The only thing would be on your management you would see it as 2 devices at the moment but I guess thats similar to what you have right now when deleting the local config (FYI removing the file and resarting the service is already enough, no need to reinstall the client).

Would this help you?

For the future we might be even able to detect multiple profiles for the same machine on dashboard so we could group them but thats to be seen once the initial feature is being developed.