From 5ad1ad1ffdce6e5d8a4194ec8fce139bbafec9e1 Mon Sep 17 00:00:00 2001 From: Zach Wasserman Date: Tue, 22 Jun 2021 14:31:26 -0700 Subject: [PATCH] Update development documentation for SSO testing (#1161) --- docs/3-Deployment/2-Configuration.md | 2 +- docs/4-Contribution/2-Testing.md | 20 +++++++------------- 2 files changed, 8 insertions(+), 14 deletions(-) diff --git a/docs/3-Deployment/2-Configuration.md b/docs/3-Deployment/2-Configuration.md index a11d64441e..ce7b8078f4 100644 --- a/docs/3-Deployment/2-Configuration.md +++ b/docs/3-Deployment/2-Configuration.md @@ -184,7 +184,7 @@ File path to a file that contains the password to use when connecting to the MyS ``` mysql: - password_path: '/run/secrets/fleetdm-mysql-password + password_path: '/run/secrets/fleetdm-mysql-password' ``` ##### `mysql_tls_ca` diff --git a/docs/4-Contribution/2-Testing.md b/docs/4-Contribution/2-Testing.md index 64ff6195e6..70de950685 100644 --- a/docs/4-Contribution/2-Testing.md +++ b/docs/4-Contribution/2-Testing.md @@ -209,7 +209,7 @@ The Fleet repo includes tools to start test osquery hosts. Please see the docume #### Manually testing email with MailHog -To intercept sent emails while running a Fleet development environment, first, in the Fleet UI, navigate to the Organization settings page under Admin. +To intercept sent emails while running a Fleet development environment, first, in the Fleet UI, navigate to the Organization settings page under Admin. Then, in the "SMTP Options" section, enter any email address in the "Sender Address" field, set the "SMTP Server" to `localhost` on port `1025`, and set "Authentication Type" to `None`. Note that you may use any active or inactive sender address. @@ -305,20 +305,14 @@ Issuer URI: http://localhost:8080/simplesaml/saml2/idp/SSOService.php Metadata URL: http://localhost:9080/simplesaml/saml2/idp/metadata.php ``` -The identity provider is configured with 2 users: +The identity provider is configured with one user: ``` -Username: user1 -Email: user1@example.com -Password: user1pass -``` - -and - -``` -Username: user2 -Email: user2@example.com -Password: user2pass +Username: sso_user +Email: sso_user@example.com +Password: user123# ``` Use the Fleet UI to invite one of these users with the associated email. Be sure the "Enable Single Sign On" box is checked for that user. Now after accepting the invitation, you should be able to log in as that user by clicking "Sign On with SimpleSAML" on the login page. + +To add additional users, modify [tools/saml/users.php](../../tools/saml/users.php) and restart the `simplesaml` container.