diff --git a/website/integrations/services/meshcentral/index.md b/website/integrations/services/meshcentral/index.md new file mode 100644 index 000000000000..c66b887a22a6 --- /dev/null +++ b/website/integrations/services/meshcentral/index.md @@ -0,0 +1,58 @@ +--- +title: MeshCentral +--- + +Support level: Community + +## What is MeshCentral + +> MeshCentral is a free, open source, web-based platform for remote device management. +> +> -- https://meshcentral.com + +## Preparation + +The following placeholders will be used: + +- `meshcentral.company` is the FQDN of the MeshCentral install. +- `authentik.company` is the FQDN of the authentik install. + +## authentik configuration + +Create an OAuth2/OpenID provider with the following parameters: + +- Client Type: `Confidential` +- Redirect URIs: `https://meshcentral.company/auth-oidc-callback` +- Scopes: OpenID, Email and Profile +- Signing Key: Select any available key + +Note the Client ID and Client Secret values. + +Next, create an application, using the provider you've created above. + +## MeshCentral configuration + +Edit the `config.json` for your MeshCentral deployment, and add the following code in the `domains:` subsection: + +```json + "domains": { + (...) + "authStrategies": { + "oidc": { + "issuer": "https://authentik.company/application/o/meshcentral/", + "clientid": "", + "clientsecret": "", + "newAccounts": true + } + }, + (...) +``` +> For Docker deployments, this file should be located in the host directory you mapped to `/opt/meshcentral/meshcentral-data` in the container. + +> Remember to follow JSON formatting rules. + +Restart the MeshCentral server instance and browse to `https://meshcentral.company`, and you should be greeted with a new button to allow signing in with OIDC: + +![MeshCentral sign-in page with OIDC enabled](meshcentral.png) + +> Should you need to enable any advanced OIDC configurations, please see [Using the OpenID Connect Strategy on MeshCentral](https://ylianst.github.io/MeshCentral/meshcentral/openidConnectStrategy/). diff --git a/website/integrations/services/meshcentral/meshcentral.png b/website/integrations/services/meshcentral/meshcentral.png new file mode 100644 index 000000000000..f7d92dd18ef1 Binary files /dev/null and b/website/integrations/services/meshcentral/meshcentral.png differ diff --git a/website/sidebarsIntegrations.js b/website/sidebarsIntegrations.js index f41677143768..15e2ce7c0c47 100644 --- a/website/sidebarsIntegrations.js +++ b/website/sidebarsIntegrations.js @@ -86,6 +86,7 @@ module.exports = { "services/harbor/index", "services/hashicorp-vault/index", "services/jenkins/index", + "services/meshcentral/index", "services/minio/index", "services/netbox/index", "services/pgadmin/index",