Skip to content

Commit 192188d

Browse files
farhan687tashian
andauthored
Apply suggestions from code review
Co-authored-by: Carl Tashian <carl-github@tashian.com>
1 parent b3a913c commit 192188d

1 file changed

Lines changed: 9 additions & 8 deletions

File tree

tutorials/connect-iru-to-smallstep.mdx

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@ You will need:
1515

1616
- A [Smallstep team](https://smallstep.com/signup)
1717
- An [Iru](https://iru.com) tenant
18+
- An Iru Blueprint that you will use to enroll devices
1819

1920
Client requirements:
2021

@@ -32,7 +33,7 @@ Client requirements:
3233
Limitations:
3334

3435
- Devices must be assigned to a Blueprint in Iru to be synced with Smallstep. Devices not in any Blueprint will not appear in your Smallstep inventory.
35-
- Iru supports static SCEP
36+
- Iru supports static SCEP for enrollment. This limitation only relates to the Smallstep provisional enrollment certificate for each device. Once the Smallstep agent is enrolled, all credentials are hardware-bound and attested.
3637

3738
## Step-by-step instructions
3839

@@ -44,13 +45,13 @@ We recommend creating a dedicated Iru API token for the Smallstep integration. T
4445

4546
This API token will allow Smallstep to read your Iru device inventory for ongoing inventory syncing.
4647

47-
1. In the Iru dashboard, click your organization name in the sidebar, then choose **Access**
48-
2. Select the **API Token** tab
48+
1. In the Iru dashboard, open your account menu in the bottom left, then choose **Access**
49+
2. Select the **API tokens** tab
4950
3. Note your **organization's API URL** (e.g., `your-org.api.kandji.io`) — you'll need this later
5051
4. Choose **Add Token** and give it a name (e.g., `Smallstep`)
5152
5. Choose **Copy Token** to copy the token value and save it temporarily — you'll use it in the next step
52-
6. Click the token from the list, then choose **Configure Permissions**
53-
7. Enable the following permissions:
53+
6. Save the token and choose **Continue** to manage its API permissions
54+
7. On the API token page, choose **Edit** and enable the following permissions:
5455
- **Device List**
5556
- **Device ID**
5657
8. Choose **Save**
@@ -64,7 +65,7 @@ Let's add the Iru credentials to Smallstep. You'll need the API URL and the API
6465
3. Enter the following credentials:
6566
- **Iru API URL**: Your organization's Iru API URL (e.g., `https://your-org.api.kandji.io`)
6667
- **API Token**: The token you created in the previous step
67-
4. Choose **Connect MDM**. Your device inventory will start syncing from Iru to Smallstep.
68+
4. Choose **Connect MDM**. Your device inventory will start syncing from Iru to Smallstep. You can check the Logs tab for sync status, and confirm that Iru is syncing by checking the Devices list. By default, all new devices will need to be approved in the Smallstep console.
6869

6970
Your Smallstep team is now linked to Iru. Smallstep will do a partial sync of your device inventory every hour, and a full sync every 8 hours.
7071

@@ -94,8 +95,8 @@ Keep this page open or save these values temporarily — you'll need them for th
9495
- **Challenge**: Paste the SCEP Challenge from the previous step
9596
- **Fingerprint**: Paste the Root Certificate Fingerprint from the previous step
9697
- **Subject**: `CN=step-agent-bootstrap`
97-
- **Subject Alternative Name**:
98-
- Key: `URI`
98+
- Enable **Subject Alternative Names (SAN)**:
99+
- Key: `Uniform Resource Identifier`
99100
- Value: `deviceid:$DEVICE_ID`
100101
- **Key Size**: `2048`
101102
- **Key Usage**: `Both signing and encryption`

0 commit comments

Comments
 (0)