Title
#fleet
d

Daniel Weeber

12/12/2021, 3:18 PM
fleetctl login with SSO doesn't seem to work. As I do not get any error whatsoever... 😕 No clue where do look It was working once yesterday, donno what happened. Login via Browser & SSO works w/o any problem
fleetctl config set --token <redacted> --email <redacted>
fleetctl config set --address https://<redacted>
fleetctl login
Log in using the standard Fleet credentials.
Email: (...)

Instead of being logged in directly

.fleet/config in userdir exists

root@admin:~# ls -la .fleet
total 12
drwx------  2 root root 4096 Dec 12 15:53 .
drwx------ 32 root root 4096 Dec 12 15:53 ..
-rw-------  1 root root  253 Dec 12 15:53 config
root@admin:~#
root@admin:~# cat .fleet/config 
contexts:
  default:
    address: https://<redacted>
    email: <redacted>
    rootca: ""
    tls-skip-verify: false
    token: <redacted>
    url-prefix: ""
root@admin:~#
zwass

zwass

12/12/2021, 10:18 PM
Ah, you need to copy the token from the My Account page when you're using SSO. That token will expire when the session expires (default 4 hours, but configurable.
d

Daniel Weeber

12/12/2021, 10:41 PM
Yeah, I got the new token from the "My Account" page just right now. Not working 😞
10:42 PM
I even logged out, logged back in and got the newly created token - same problem. The token definitely changed
10:43 PM
Even with --debug no error or similar is showing up
root@fleetdm:~# fleetctl login --debug
Log in using the standard Fleet credentials.
Email:
zwass

zwass

12/12/2021, 10:44 PM
d

Daniel Weeber

12/12/2021, 10:44 PM
I did not say that I used the login command to set the token?
10:45 PM
root@fleetdm:~# fleetctl config set --token <redacted>
[+] Set the token config key to "<redacted>" in the "default" context
root@fleetdm:~# fleetctl login --debug
Log in using the standard Fleet credentials.
zwass

zwass

12/12/2021, 10:46 PM
Once you set the token, can you try a command that will hit the server such as
fleetctl get config
?
d

Daniel Weeber

12/12/2021, 10:46 PM
Working fine.. wow!
zwass

zwass

12/12/2021, 10:48 PM
Nice!
d

Daniel Weeber

12/12/2021, 10:50 PM
Shouldn't I be able to use the login command? Or maybe it should tell me "you dont need the login command, because you've setup a token"?