Separate Dashboard user with autologin for SSO

General
1

Hello together,
I’m using CEE 2.4.0p5
We have a TV with a windows pc attached to it in our office. It automatically starts and opens a URL to login into Checkmk and show a custom dashboard.
For future proofness I would like to change how it logs into Checkmk.
At the moment it opens the following URL on startup with user and password in the URL :frowning:
https://mycmkserver/mysite/check_mk/login.py?_origtarget=/mysite/check_mk/dashboard.py?name=mydashboard&_username=mykioskuser&_password=%kioskuserpassword%&_login=1
(Like here: How to use auto login for dashboards in checkmk - #6 by sebkir )

Now I created a user via Azure SSO with SAML.
Everything’s fine, single sign-on works flawlessly automatically with this URL:
https://checkmk.domain.com/sitename/check_mk/saml_sso.py?RelayState=SAMLPROVIDERID%2Cindex.py
The user is a guest user, so I set the start URL as following for it: dashboard.py?name=problems_edit1
Problem is, it always shows the menus to the left and right when I login with that URL

Does anyone know a solution?
Greetings
Max

1 Like
2

Does anyone know a solution?

3

Nevermind.

Finally found it:
https://checkmk.DOMAIN.COM/SITENAME/check_mk/saml_sso.py?RelayState=SAMLID%2Cdashboard.py?name=problems_edit1

1 Like
4

For the whole setup another information.

I setup two scripts, one in the autostart executing the powershell script (a batch) :

timeout 60
powershell.exe -ExecutionPolicy Bypass -File "C:\Install\CHECKMKNICHTLOESCHEN\DO_NOT_DELETE_checkmk_dashboard_script_with_sso.ps1"

That’s the second script (powershell), opening Edge and maximizing it afterwards:

$edge = "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
$url  = "https://checkmk.DOMAIN.COM/SITENAME/check_mk/saml_sso.py?RelayState=SAMLID%2Cdashboard.py?name=problems_edit1"

# Neues Fenster starten (SSO über Default-Profil)
Start-Process $edge -ArgumentList @("--new-window", "--profile-directory=Default", $url)

# Kurz warten, bis das Fenster da ist
Start-Sleep -Seconds 2

# Vollbild (F11) senden
Add-Type -AssemblyName System.Windows.Forms
[System.Windows.Forms.SendKeys]::SendWait("{F11}")