EntraID SSO Support

[lleal99B]

Hi, I was searching a solution to Wayland desktop issue and followed some suggestion to use MeshCentralRouter to allow an RDP connection to gnome-remote-desktop on Ubuntu 24.04. It worked.

The only issue that remains for me about this workaround is MeshCentralRouter SSO support for EntraId.

We are going to check the code to see if it's not too hard to implement.

Does anyone have some suggestions or experience with that?

[si458]

From my understanding, the meshcentralrouter only currently supports sms, email, messaging and totp.

It doesn't support things like yubikey or Duo.

It also only supports local logins/ldap again from my understanding

It also doesn't support external logins like oidc/saml, so ur SSO won't work im afraid.

If u wanted OIDC support, I could look into adding it but it would take some time, I don't have full C# knowledge but I've learn abit to fix a few issues the router application had

[lleal99B]

Oh good, we are a 80% windows c# company. I'll ask to of my developers to check the code and see if one of our EntraID authentication libraries works to develop an internal branch of the application. I'll maintain you up to date of any advance. Enviado desde Outlook para Android<https://aka.ms/AAb9ysg>

…

________________________________ From: Simon Smith ***@***.***> Sent: Friday, June 27, 2025 1:47:15 PM To: Ylianst/MeshCentralRouter ***@***.***> Cc: lleal99B ***@***.***>; Author ***@***.***> Subject: Re: [Ylianst/MeshCentralRouter] EntraID SSO Support (Issue #115) [https://avatars.githubusercontent.com/u/765314?s=20&v=4]si458 left a comment (Ylianst/MeshCentralRouter#115)<#115 (comment)> From my understanding, the meshcentralrouter only currently supports sms, email, and totp. It doesn't support things like yubikey or Duo. It also only supports local logins/ldap again from my understanding It also doesn't support external logins like oidc/saml, so ur SSO won't work im afraid. If u wanted OIDC support, I could look into adding it but it would take some time, I don't have full C# knowledge but I've learn abit to fix a few issues the router application had — Reply to this email directly, view it on GitHub<#115 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AP7U2WKT7OQLFQSYF6EI2S33FWGTHAVCNFSM6AAAAACAJT3I2WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMJUGA3DIOBXGY>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[si458]

That's perfectly fine! The source code is in this repo and just works in visual studio!

If u have any luck with getting it to work, maybe contribute it back into the repo? Then it can be shared with others ❤️

[lleal99B]

I will have to ask permission to my boss the ceo but im sure he will agree. He knows all the benefits we have received from meshcentral and money is short right know but developers and knowledge we can contribute . Enviado desde Outlook para Android<https://aka.ms/AAb9ysg>

…

________________________________ From: Simon Smith ***@***.***> Sent: Friday, June 27, 2025 2:29:12 PM To: Ylianst/MeshCentralRouter ***@***.***> Cc: lleal99B ***@***.***>; Author ***@***.***> Subject: Re: [Ylianst/MeshCentralRouter] EntraID SSO Support (Issue #115) [https://avatars.githubusercontent.com/u/765314?s=20&v=4]si458 left a comment (Ylianst/MeshCentralRouter#115)<#115 (comment)> That's perfectly fine! The source code is in this repo and just works in visual studio! If u have any luck with getting it to work, maybe contribute it back into the repo? Then it can be shared with others ❤️ — Reply to this email directly, view it on GitHub<#115 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AP7U2WKEU7KFHXQLF7Z4N7T3FWLQRAVCNFSM6AAAAACAJT3I2WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMJUGE3DMMBWHE>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[si458]

@lleal99B, sure, no worries!
The only thing we ask is if u need to include libraries of any kind and u contribute back, please make sure they are open-source and have the correct license!
But if u want to use private libraries and for ur own use, then that's also acceptable!