Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 24 Packages Projects Releases Wiki Activity
Files
2d4e72ac7aed6a8ccb339fcbddef3525c66cbe43
fleet/server/service
T
History
Scott Gress 2d4e72ac7a Alias JIT Saml "team" attribute to FLEET_JIT_USER_ROLE_FLEET_<FLEET ID> (#41402) 
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40642 

# Details

This PR adds `FLEET_JIT_USER_ROLE_FLEET_` as an expected Saml attribute
alongside `FLEET_JIT_USER_ROLE_TEAM_`.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually
Tested with SimpleSAML SSO. 
- [x] Updated `users.php` to use both the new attribute and the old
attribute for a user, and was able to log in with that user and see them
created using JIT with the correct permissions
2026-03-13 08:34:29 -05:00
..
async
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
calendar
Migrated logging and google calendar files to use slog (#40541)
2026-02-26 12:48:54 -06:00
conditional_access_microsoft_proxy
Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry (#40051)
2026-02-19 16:06:00 -06:00
contract
…
externalsvc
…
integrationtest
Converted old activity module into function. Cleaned up activity types. (#40752)
2026-03-03 01:01:42 -06:00
middleware
Android WebApps: endpoint to create one, prevent android app configuration on webApps (#40329)
2026-03-02 15:14:19 -05:00
mock
…
osquery_utils
Fix Jetbrains versions - Take 2 (#40928)
2026-03-06 12:30:20 -07:00
redis_key_value
…
redis_lock
…
redis_policy_set
…
schedule
Fix flaky test: TestTriggerPollPicksUpQueuedRecord (#41155)
2026-03-10 12:55:42 -05:00
testdata
Android WebApps: endpoint to create one, prevent android app configuration on webApps (#40329)
2026-03-02 15:14:19 -05:00
activities_test.go
Move PostJSONWithTimeout to platform/http package and activity cleanup (#40561)
2026-02-26 17:39:10 -06:00
activities.go
Converted old activity module into function. Cleaned up activity types. (#40752)
2026-03-03 01:01:42 -06:00
appconfig_test.go
Update default lock end user info value to match EUA when not specified (#41441)
2026-03-12 12:00:51 -04:00
appconfig.go
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
apple_mdm_cmd_results_test.go
Set recovery lock password - mdm commands (#41217)
2026-03-12 06:06:56 -06:00
apple_mdm_cmd_results.go
Ignore version checks for VPP app installs (#40862)
2026-03-03 14:01:57 -05:00
apple_mdm_ddm_test.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
apple_mdm_test.go
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
apple_mdm.go
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
base_client_errors_test.go
…
base_client_errors.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
base_client_test.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
base_client.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
build_tags_test.go
…
calendar.go
Moved common endpointer packages to platform dir. (#37780)
2026-01-06 14:23:07 -06:00
campaigns_test.go
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
campaigns.go
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
carves_test.go
Authenticate carve block endpoint before parsing the "data" field (#39353)
2026-02-05 15:55:03 -03:00
carves.go
Authenticate carve block endpoint before parsing the "data" field (#39353)
2026-02-05 15:55:03 -03:00
certificate_authorities_test.go
…
certificate_authorities.go
…
certificate_templates_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
certificate_templates.go
Android certificate crud: validate variable replacement (#36648)
2025-12-05 12:14:14 -06:00
certificates.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
client_android_certificates.go
Added subject name to certificate template list endpoint response (#37028)
2025-12-11 05:38:59 -06:00
client_appconfig.go
…
client_carves.go
…
client_certificate_authorities.go
gitops, basic apis, and table for android certificate templates (#35788)
2025-11-24 15:44:06 -06:00
client_debug.go
…
client_hosts.go
…
client_labels.go
gitops changes for team labels (#37801)
2026-01-06 17:47:30 -04:00
client_live_query_test.go
…
client_live_query.go
…
client_mdm_test.go
…
client_mdm.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
client_packs.go
…
client_policies.go
…
client_profiles.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
client_queries.go
…
client_scripts.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
client_secret_variables.go
…
client_sessions.go
…
client_setup.go
…
client_software.go
Use custom icons in GitOps for Fleet Maintained Apps (#38497)
2026-01-20 11:56:40 -05:00
client_targets.go
…
client_teams.go
Implement webhooks_and_tickets_enabled flag for policies in GitOps (#41183)
2026-03-10 15:11:27 -05:00
client_test.go
gitops changes for team labels (#37801)
2026-01-06 17:47:30 -04:00
client_trigger.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
client_users.go
…
client.go
Implement webhooks_and_tickets_enabled flag for policies in GitOps (#41183)
2026-03-10 15:11:27 -05:00
conditional_access_idp_test.go
Okta IdP Apple profile endpoint + fixes (#35526)
2025-11-14 13:49:08 -06:00
conditional_access_idp.go
Only allow FLEET_DEV_* env vars when --dev is passed, allow overriding configs one at a time in dev (#38652)
2026-01-27 14:32:56 -06:00
conditional_access_microsoft.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
cron_schedules_test.go
…
cron_schedules.go
Trigger vuln processing when it runs on a separate server (#39612)
2026-02-17 09:18:03 -06:00
debug_handler_test.go
Revise auth requirements for debug endpoints (#38173)
2026-01-12 10:37:06 -06:00
debug_handler.go
Migrate HTTP request logging from go-kit/log to slog (#39729)
2026-02-14 13:04:41 -06:00
device_client_test.go
Ability to set fleet desktop alternative browser host in org settings (#38409)
2026-01-19 16:25:22 -04:00
device_client.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
devices_endpoint_test.go
Add conditional access already bypassed check (#39037)
2026-02-02 10:35:55 -05:00
devices_test.go
Update backend error messages (#40364)
2026-02-25 13:54:45 -06:00
devices_url_auth_test.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
devices.go
Migrated to slog method signatures in service files (#40468)
2026-02-26 07:16:44 -06:00
endpoint_campaigns.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
endpoint_middleware_test.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
endpoint_middleware.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
endpoint_setup_test.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
endpoint_setup.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
endpoint_utils_test.go
Add CSP to fleet(currently disabled - needs frontend work) (#41395)
2026-03-12 18:06:54 -04:00
endpoint_utils.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
frontend_test.go
Add CSP to fleet(currently disabled - needs frontend work) (#41395)
2026-03-12 18:06:54 -04:00
frontend.go
Add CSP to fleet(currently disabled - needs frontend work) (#41395)
2026-03-12 18:06:54 -04:00
full_test.go
…
global_policies_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
global_policies.go
Update backend error messages (#40364)
2026-02-25 13:54:45 -06:00
global_schedule_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
global_schedule.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
handler_deprecated_paths.go
Deprecate URLs with "team" and "query" terminology (#40520)
2026-02-25 22:20:35 -06:00
handler_test.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
handler.go
Increase body size limits for osquerylog and osquery/dist/write endpoints (#40946)
2026-03-09 13:49:07 -04:00
hosts_test.go
Renamed activity tables and moved host activities cleanup to activity bounded context. (#41194)
2026-03-08 21:54:06 -05:00
hosts.go
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
http_auth_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
integration_android_certificate_templates_test.go
Modified Android certificate renewal logic to make it easier to test. (#40635)
2026-03-02 16:25:48 -08:00
integration_android_software_test.go
Renamed activity tables and moved host activities cleanup to activity bounded context. (#41194)
2026-03-08 21:54:06 -05:00
integration_certificate_authorities_test.go
Revert "Added deny list for checking external user submitted urls"
2026-02-24 16:29:08 -06:00
integration_core_test.go
Add fleet_id / fleet_name columns to CSV hosts export (#41446)
2026-03-11 11:38:07 -05:00
integration_desktop_test.go
Request body limits (#39080)
2026-02-05 10:29:53 -05:00
integration_ds_only_test.go
…
integration_enterprise_test.go
Alias JIT Saml "team" attribute to FLEET_JIT_USER_ROLE_FLEET_<FLEET ID> (#41402)
2026-03-13 08:34:29 -05:00
integration_enterprise_vulns_test.go
Remove duplicate RHEL kernel in os_version (#39746)
2026-02-12 09:13:24 -07:00
integration_install_test.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
integration_live_queries_test.go
Renamed activity tables and moved host activities cleanup to activity bounded context. (#41194)
2026-03-08 21:54:06 -05:00
integration_logger_test.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
integration_mdm_commands_test.go
only refetch location data if iDevice is locked (#39241)
2026-02-04 09:23:44 -05:00
integration_mdm_ddm_test.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
integration_mdm_dep_test.go
remove mysql DumpTable in test (#40876)
2026-03-04 14:39:02 -05:00
integration_mdm_lifecycle_test.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
integration_mdm_profiles_test.go
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
integration_mdm_release_worker_test.go
…
integration_mdm_setup_experience_test.go
Flaky test fix: Skip worker jobs to avoid race conditions in tests (#40536)
2026-02-25 15:20:40 -06:00
integration_mdm_test.go
Update DEP enrollment flow to apply minimum macOS version check when specified (#40720)
2026-03-12 16:54:46 -05:00
integration_smtp_test.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
integration_software_titles_test.go
retry software installer download and upload during gitops (#40643)
2026-02-27 14:05:15 -05:00
integration_sso_test.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
integration_vpp_install_test.go
Fix software installer error team -> fleet (#41070)
2026-03-05 17:28:52 -06:00
invites_test.go
…
invites.go
…
jitter_test.go
…
jitter.go
…
labels_test.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
labels_util.go
Address backend review feedback from #37208 (#37742)
2025-12-30 08:48:55 -03:00
labels.go
Label validation not catching invalid platform (#39964)
2026-02-17 14:04:07 -04:00
linux_mdm_test.go
…
linux_mdm.go
…
live_queries.go
Migrated to slog method signatures in service files (#40468)
2026-02-26 07:16:44 -06:00
mail_test.go
…
maintained_apps.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
mdm_profiles_test.go
ARCW: Add Renewal ID verification and support in windows profiles (#37179)
2025-12-12 13:14:59 -04:00
mdm_profiles.go
ARCW: Add Renewal ID verification and support in windows profiles (#37179)
2025-12-12 13:14:59 -04:00
mdm_scep.go
Final slog migration PR: test infrastructure + tools + remaining standalone files (#40727)
2026-02-28 05:52:21 -06:00
mdm_test.go
Recovery password: restrict manual mdm commands (#41427)
2026-03-11 09:41:56 -06:00
mdm.go
Recovery password: restrict manual mdm commands (#41427)
2026-03-11 09:41:56 -06:00
mem_failing_policies_set_test.go
…
metrics_appconfig.go
…
metrics_change_email.go
…
metrics_invites.go
…
metrics_labels.go
API + auth + UI changes for team labels (#37208)
2025-12-29 21:28:45 -06:00
metrics_sessions.go
extend the expiration date for the auth token cookie (#41261)
2026-03-10 17:15:09 +00:00
metrics_users.go
…
metrics.go
…
microsoft_mdm_test.go
improve windows resending (#40365)
2026-02-24 09:10:07 -05:00
microsoft_mdm.go
Added support for NDES CA for Windows hosts (#41356)
2026-03-12 15:36:44 -05:00
orbit_client_test.go
…
orbit_client.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
orbit_test.go
Policy automation replica lag (#40906)
2026-03-03 17:44:49 -06:00
orbit.go
Policy automation replica lag (#40906)
2026-03-03 17:44:49 -06:00
osquery_test.go
Fix Jetbrains versions - Take 2 (#40928)
2026-03-06 12:30:20 -07:00
osquery.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
packs_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
packs.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
queries_test.go
Added license checks when targeting queries by label (33045) (#41255)
2026-03-09 16:54:53 -04:00
queries.go
Added license checks when targeting queries by label (33045) (#41255)
2026-03-09 16:54:53 -04:00
scheduled_queries_test.go
…
scheduled_queries.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
scim.go
…
scripts_encoding_test.go
Fix FMAs on Render (#37557)
2025-12-23 13:01:32 -05:00
scripts_encoding.go
Fix FMAs on Render (#37557)
2025-12-23 13:01:32 -05:00
scripts_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
scripts.go
Update backend error messages (#40364)
2026-02-25 13:54:45 -06:00
secret_variables_test.go
…
secret_variables.go
…
service_appconfig_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
service_appconfig.go
Add support for publishing logs to NATS. (#36527)
2026-01-06 09:10:32 -03:00
service_campaign_test.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
service_campaigns.go
slog migration: service layer + subsystem libraries (#40661)
2026-02-26 17:40:46 -06:00
service_errors.go
Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry (#40051)
2026-02-19 16:06:00 -06:00
service_users.go
Refactor endpoint_utils for modularization (#36484)
2025-12-31 09:12:00 -06:00
service.go
Renamed activity tables and moved host activities cleanup to activity bounded context. (#41194)
2026-03-08 21:54:06 -05:00
sessions_test.go
Enable JIT provisioning for Technician role (#41286)
2026-03-10 10:15:01 -03:00
sessions.go
extend the expiration date for the auth token cookie (#41261)
2026-03-10 17:15:09 +00:00
setup_experience_test.go
Use lighter Team call when it's obviously safe to do so, comment potential areas for further improvement (#35587)
2025-11-17 17:25:45 -06:00
setup_experience.go
Deprecate "team" and "query" API params (#39873)
2026-02-19 13:53:32 -06:00
software_installers_test.go
Fix data race in TestSoftwareInstallerUploadRetries (#40784)
2026-03-02 10:04:59 -06:00
software_installers.go
Deprecate "team" and "query" API params (#39873)
2026-02-19 13:53:32 -06:00
software_test.go
…
software_title_icons_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
software_title_icons.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
software_titles_test.go
…
software_titles.go
Update backend error messages (#40364)
2026-02-25 13:54:45 -06:00
software.go
Update backend error messages (#40364)
2026-02-25 13:54:45 -06:00
status.go
…
targets_test.go
…
targets.go
Follow-up changes to observer live query bypass (#41146)
2026-03-11 13:42:33 -03:00
team_policies_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
team_policies.go
Rework conditional access policy bypass conditions to use critical column (#40736)
2026-03-05 17:05:03 -05:00
team_schedule_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
team_schedule.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
teams_test.go
Move NewActivity to activity bounded context (#39521)
2026-02-25 14:11:03 -06:00
teams.go
Add renameto tags to prepare for deprecating team and query API params (#39847)
2026-02-17 10:00:59 -06:00
testing_client.go
Converted old activity module into function. Cleaned up activity types. (#40752)
2026-03-03 01:01:42 -06:00
testing_utils.go
Add CSP to fleet(currently disabled - needs frontend work) (#41395)
2026-03-12 18:06:54 -04:00
translator.go
Moved common endpointer packages to platform dir. (#37780)
2026-01-06 14:23:07 -06:00
transport_error.go
Improved OpenTelemetry error handling (#38757)
2026-01-26 17:07:32 -06:00
transport_setup.go
…
transport_test.go
Deprecate "team" and "query" API params (#39873)
2026-02-19 13:53:32 -06:00
transport.go
Deprecate "team" and "query" API params (#39873)
2026-02-19 13:53:32 -06:00
trigger.go
…
user_roles.go
…
users_test.go
Fix data race in ErrorWithUUID.UUID() causing CI test failures (#40961)
2026-03-05 09:17:51 -06:00
users.go
Migrated to slog method signatures in service files (#40468)
2026-02-26 07:16:44 -06:00
validation_setup.go
…
vpp_test.go
Converted old activity module into function. Cleaned up activity types. (#40752)
2026-03-03 01:01:42 -06:00
vpp.go
Android WebApps: endpoint to create one, prevent android app configuration on webApps (#40329)
2026-03-02 15:14:19 -05:00
vulnerabilities_test.go
…
vulnerabilities.go
Update backend error messages (#40364)
2026-02-25 13:54:45 -06:00
windows_mdm_profiles_test.go
Added support for NDES CA for Windows hosts (#41356)
2026-03-12 15:36:44 -05:00
windows_mdm_profiles.go
Added support for NDES CA for Windows hosts (#41356)
2026-03-12 15:36:44 -05:00