EnrollOrbit now determines end user authentication requirements from
server policy rather than the client-supplied X-Fleet-Capabilities
header, which is treated as an informational hint.
Adds the mdm.allow_orbit_end_user_auth_bypass setting (enabled by
default) controlling whether hosts that do not complete end user
authentication may enroll into a team that requires it; set it to false
to strictly enforce end user auth. The setting also governs installers
built with fleetctl package --bypass-end-user-auth.
Configuration
Fleet server
Fleet server configuration
Documentation for configuring the Fleet binary, managing osquery configurations, and running with systemd.
Agent
Agent configuration
Learn how to set agent options with config YAML file and the fleetctl command line tool.