Fleet

Overview

The Fleet integration connects your Fleet instance to Oneleet and syncs its users as user account assets, so Oneleet can monitor who has access to Fleet and whether they use multi-factor authentication.

What does Oneleet monitor?

• Fleet users (user accounts), including each user’s global role and, on Fleet Premium, their per-team roles
• Whether each user who signs in with a Fleet password has multi-factor authentication enabled

Users who sign in through SSO pass the multi-factor authentication check, because your identity provider handles their sign-in. API-only users have no interactive login, so the check doesn’t apply to them.

Setup

To set up the Fleet integration, navigate to Integrations > Add integration > Fleet.

Oneleet connects with the API token of an API-only user. Create it as a Fleet admin:

1. In Fleet, go to Settings > Users and click Create user.
2. Give the user a name such as Oneleet, select API-only, and give it the global Observer role, which is enough to list users.
3. Click Create and copy the API token. Fleet only shows it once.
4. Enter your Fleet domain (for example fleet.example.com) and the API token in the Oneleet setup form.

You can also create the user from the command line:

fleetctl user create --name 'Oneleet' --api-only --global-role observer