You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Sep 23, 2021. It is now read-only.
Copy file name to clipboardExpand all lines: source/use-cases/enrollment-process.rst
+48-10
Original file line number
Diff line number
Diff line change
@@ -3,16 +3,30 @@ Enrollment process
3
3
4
4
Enrollment requests
5
5
~~~~~~~~~~~~~~~~~~~
6
-
The guest user enrolls himself using a deeplink sent by email. They both contain the same useful data to build several HTTP requests.
7
6
8
-
The user token is a token to authenticate against the REST API. When an administrator invites someone to enroll his devices, an account is created. The login is the email address provided by the administrator. The user API token is unique among all user accounts. Using it alone is sufficient to get a session, as described in GLPI documentation.
7
+
The guest user enrolls himself using a QR code or a deeplink sent by email. They both contain
8
+
the same useful data to build several HTTP requests.
9
+
10
+
The user token is a token to authenticate against the REST API. When an administrator invites someone to enroll his devices,
11
+
an account is created. The login is the email address provided by the administrator.
12
+
13
+
The user API token is unique among all user accounts. Using it alone is sufficient to get a session, as described in GLPI documentation.
9
14
10
15
The invitation token is a hash with limited lifetime to identify the invitation being used at enrollment time.
11
16
12
-
After the enrollment the agent must connect to the MQTT broker. The serial of the device and the password sent by the backend in the enrollment process are the credentials.
17
+
After the enrollment the agent must connect to the MQTT broker. The serial of the device and the password sent
18
+
by the backend in the enrollment process are the credentials.
13
19
14
-
Content in the deeplink
15
-
~~~~~~~~~~~~~~~~~~~~~~~
20
+
Deeplink
21
+
~~~~~~~~
22
+
23
+
`Flyve MDM Deeplink <https://github.com/flyve-mdm/deeplink>`_, is a microservice hosted by us, that generates a deeplink with
24
+
the information of the invitation to perform the enrollment of the device.
25
+
26
+
The organizations have the option to set up their own instance of Flyve MDM Deeplink, in order to manage by themselves this microservice.
27
+
28
+
Content
29
+
#######
16
30
17
31
The deeplink contains some base64 encoded semicolon separated fields like a CSV format:
18
32
@@ -24,13 +38,32 @@ The deeplink contains some base64 encoded semicolon separated fields like a CSV
24
38
* the website of the company's helpdesk
25
39
* the email of the company's helpdesk
26
40
27
-
All fields related to the helpdesk may be not populated by the administrators. The fields are ordered.
28
-
29
-
The URL of the backend is the base for requests built by the client, which must be suffixed by the endpoint to reach. See the `GLPI documentation <https://github.com/glpi-project/glpi/blob/master/apirest.md>`_ to know more about the rest API of GLPI.
41
+
All fields related to the helpdesk may not be populated by the administrators. The fields are ordered.
The URL of the backend is the base for requests built by the client, which must be suffixed by the endpoint to reach.
92
+
See the `GLPI documentation <https://github.com/glpi-project/glpi/blob/master/apirest.md>`_ to know more about the rest API of GLPI.
93
+
56
94
Check the current profile
57
95
~~~~~~~~~~~~~~~~~~~~~~~~~
58
96
@@ -249,7 +287,7 @@ Answer if the request succeeds
249
287
250
288
The property certificate in the JSON payload is the certificate delivered to the agent if the client certificate feature is enabled.
251
289
252
-
* **api_token**: to consume API from GLPI. Used to downlaod files and applications from HTTP(S).
290
+
* **api_token**: to consume API from GLPI. Used to download files and applications from HTTP(S).
253
291
* **mqttpasswd**: password to access MQTT. Login is the serial of the device.
254
292
255
293
The api_token delivered by this request replaces the user_token used in the first request **initSession**. The agent must forget the user_token and save for later use the api_token received from this request.
0 commit comments