How can we help?

Deploying Auvik SaaS Management (Saaslio)

Follow

Deployment Visual Breakdown

How the Windows Desktop Agent Works 

Requirements 

Security Considerations  

Logging into the Saaslio Application

Choosing your provider. 

Azure AD Integration Setup (For Partner Hub)

Creating the Application in your Azure Portal 

Adding the Permissions to your Azure Application 

Generating your Application Azure Certificate & Secret 

Setting your credentials in the Saaslio Dashboard

(Optional) Syncing your Office Azure AD Groups in the Auvik SaaS Management (Saaslio)  Dashboard

Retrieving your Deployment Script for Windows or Mac Distribution

Azure AD Integration Setup (For End-Clients):

Registering your Client in the Auvik SaaS Management (Saaslio) Partner Dashboard 

Logging in to Your Client’s Dashboard & Retrieving Windows  Deployment Script 

Deploying the Auvik SaaS Management (Saaslio) Agent WITH a Remote Monitoring & Management Tool (RMM)

(Windows) Installing the Desktop Agent with SSO & Sideloading Browser Extensions 

(Mac) Installing the Desktop Agent with a Mobile Device Management Tool (MDM)

(Mac) Installing the Desktop Agent Manually

Browser Extension ADMX/ADM Files

Installing Browser Extensions 

Forcing Group Policy To Update

Uninstalling Saaslio

Debugging Auvik SaaS Management (Saaslio)

Deployment Visual Breakdown

AE3521CE-F269-46F8-8142-E2C7F52E0754_4_5005_c.jpeg

How the Windows Desktop Agent Works 

After the Windows Desktop Agent is installed (see below for installation steps), it  will sideload 1 the Chrome and Edge extensions. Upon the users Edge after desktop installation a message will prompt them to confirm the Auvik SaaS Management (Saaslio) extension. (In Chrome, the Auvik SaaS Management (Saaslio) extension will automatically be enabled). Once they confirm the Auvik SaaS Management (Saaslio) browser extension, they will be prompted to login with their 365 credentials, unless SSO has been enabled  during the installation process. After this is setup, no further user interaction is  required except interactions with the web application. 

Note: Firefox does not support sideloading, and a separate deployment method is recommended for those users. They can download it directly from the browser stores as well.

Chrome / Edge (chromium) / Opera / Chrome-based-browsers: https://chrome.google.com/webstore/detail/saaslio/kieikihnfebppciimgpalbdjkjiahnlk

Firefox:

https://addons.mozilla.org/en-US/firefox/addon/saaslio/

1 Sideload: This is the process of loading an extension when deploying a desktop application.

Requirements 

  • You must be an Administrator for the AAD tenant you are configuring and  for the Auvik SaaS Management (Saaslio) instance you are configuring. 
  • For the workstation(s) you are installing Auvik SaaS Management (Saaslio) on, you must have the ability to run the Command Prompt as an Administrator
  • The workstation(s) must have https (port 443/tcp) access to:  

DDNS Entries: application-dev.saaslio.com, application.saaslio.com

Security Considerations  

  1. The desktop agent is installed to run when a user unlocks their computer and will run in the background. The desktop agent monitors:  
  2. Users mouse and keyboard activity to ensure they are active to report correct usage. No keyboard strokes or mouse activity is tracked or reported on. 
  3. What window is currently active, and reads metadata to determine  which application is being utilized. 
  4. The desktop agent will deploy a payload periodically to the above DDNS  entries which will contain a user security token, and will contain ONLY  usage information and application metadata.  

Note: No personal user configurations, hardware identifiers, network identifiers, are included in any payload.

 

  1. The desktop agent will modify registry entries on the local desktop  environment to sideload browser extensions. The user will be prompted to enable the extension if they use the Edge browser. 
  2. The desktop agent will communicate with browser extensions to receive user security tokens as well as configurations relative to the Saaslio  software.

Logging into the Auvik SaaS Management (Saaslio) Application

Choosing your provider. 

  1. Visit https://app.saaslio.com/ and log in with either your Google Workspace or Azure Active Directory service.
  2. If you are using Azure Active Directory and see the below issue 
    EAB3DAD7-A33C-4169-B2EF-CB3B1D01234A_4_5005_c.jpeg

Azure AD Integration Setup (For Partner Hub)

Creating the Application in your Azure Portal 

  1. Visit https://portal.azure.com/ and login to an administrator account for  the tenant you are configuring. 
  2. Once authenticated, click the Search Box at the top of Azure.  
  3. Type “App Registrations” in this box, and the following option should  appear: Click this option. 
    C62CA2C9-F5F9-4BEE-AD3F-85FCCDE6A9B3_4_5005_c.jpeg

    Note:
    If this does not appear you may not have sufficient privileges.
  1. In the App Registrations dashboard, click the New Registration button (right under the header of the page) 
  2. Fill out the Register an Application Form:
  3. For the Name, input something that follows your organizations naming syntax and includes the name Saaslio (for some management later).
  4. For the Supported Account Types, select the option that meets your  organization’s needs. In most cases it will either be:
    Default Directory – Single Tenant or Any Azure AD Directory – Multitenant 
  5. For the Redirect Uri, leave this blank.
  6. Click the Register Button after filling out the form.

Adding the Permissions to your Azure Application 

  1. You will be redirected to your new app registration’s page. On the left-hand side of the page you will see a navigation menu. Select the  8CF40BBE-0922-4E11-A6F7-627CCA9ED88E_4_5005_c.jpegoption. You will be redirected to the API Permissions  page. 
  2. In the API Permissions page, click the + Add a Permission button. 
  3. On the right-hand side of the page, a new dialogue will prompt with the options to Request API Permissions. Select the Microsoft Graph API option. 
  4. You will then be requested to choose which type of access you are granting, Saaslio requires “Application Permissions.” 
  5. You may use the search box to find the following permissions below. All of these Application permissions are required. 
    1. Directory.Read.All 
    2. Group.Read.All 
    3. Organization.Read.All 
    4. Team.ReadBasic.All 
    5. User.Read.All
    6. AuditLog.Read.All
  6. Once you’ve selected these permissions, click the Add Permissions button  at the bottom of the page. The sidebar dialogue will disappear and your new permission set should look like the following:
    D2C25A92-61BE-4930-929D-91A8B5098F19_4_5005_c.jpeg
  7. These app permissions will need to be approved by an Administrator. Click the Grant Admin consent for Default Directory or if you do not have  access, have your local administrator handle this action. 

Generating your Application Azure Certificate & Secret 

In the following steps you are generating a secret that is only visible once, be prepared to copy and store it somewhere secure.

  1. You will need to generate an application secret for the Saaslio platform to have access to this application and new permissions. On the left-hand side navigation, click the 2B1DC2F3-BCF3-4A65-8719-545EEEF1F09D_4_5005_c.jpegmenu option.  
  2. Generate a new client secret by clicking the + New Client Secret. Button and name the secret something you will remember, and choose your expiration timeframe.

    Important: After creating your secret, copy it and store it in a secure stash  or a text note that will be deleted later, as it will become obfuscated after leaving this page. 

Setting your credentials in the Auvik SaaS Management (Saaslio) Dashboard

  1. Afterwards, click on the Auvik SaaS Management (Saaslio) icon in your extension & select the Administrator Dashboard from the Home Menu. A new tab will appear. 
  2. Click on the Deployment navigation link under the Administrator links. 
  3. Click on the ‘Configure AD Integration’ button. Once inside the configuration page, click the Enable Azure AD Integration radio button, and two new fields will appear. You will need to provide an Identity Application ID and an Application Secret

    DCA8B8BF-B39F-4211-AB0C-C38BBBEF3C28_4_5005_c.jpeg

  4. The Application ID can be found on the front page of your App Registration  dashboard:  
  5. The Application Secret is the one you generated in steps 1 through steps  3. 
  6. After enabling your Azure AD integration, two new tabs Groups and Users should appear.

(Optional) Syncing your Office Azure AD Groups in the Auvik SaaS Management (Saaslio)  Dashboard

  1. In your dashboard, click the Groups Tab. Inside this view, you will be able to click the Users Icon or the Refresh / Cancel Icon: 
    1. The Users Icon will show you a list of users in your platform and if  they exist in your system.  
    2. The Refresh / Cancel Icon will denote whether you are enabling sync  or not for this group.

      Note: These groups refresh every hour and on the first sync.

Retrieving your Deployment Script for Windows or Mac Distribution

  1. If you are not logged in, login to your environment.
  2. Click on the Deployment navigation link under the Administrator links. 
  3. Click on “Deploy Devices”
  4. Click the Operating System appropriate Deployment Command. This command will be used to deploy the SSO Windows Agent to your devices.

Azure AD Integration Setup (For End-Clients):

Registering your Client in the Auvik SaaS Management (Saaslio) Partner Dashboard 

  1. In the left-hand navigation sidebar, click the Partner Dashboard ->  Organizations navigation link. 
  2. Now that you are in the Organizations page, click the Add Organization tab  in the user interface. 
  3. You will be prompted to register your organization in this interface. Follow the steps in the Azure AD Integration Setup steps except this time register the application under the customer’s Azure AD environment. 
  4. Fill out the form on this page: 
  5. Tenant Name: The name of your client you are registering. 
  6. Azure AD Tenant ID / Azure AD Application ID / Azure AD  Application Secret:

This ID can be retrieved in the same interface that you retrieve your application secret & application ID in the  Setting your credentials in the Saaslio Dashboard step.  

  1. Click the Save Settings button in the bottom right. 

Logging in to Your Client’s Dashboard & Retrieving Windows  Deployment Script 

  1. In the Organizations tab under the Partner Dashboard -> Organizations page, click the Arrow Icon next to the customer you want to authenticate  into. 
  2. Follow the steps in the Retrieving your Deployment Script for Windows  Distribution step while logged under your client.

 

Deploying the Auvik SaaS Management (Saaslio) Agent WITH a Remote Monitoring & Management Tool (RMM)

(Windows) Installing the Desktop Agent with SSO & Sideloading Browser Extensions 

  1. Login to the Auvik SaaS Management (Saaslio) application web interface.
  2. Visit the web application for Auvik SaaS Management (Saaslio) (https://www.saaslio.com/) and navigate to the Partner -> Integrations page.
  3. Select the Integration to support your RMM.
    Note: If your RMM integration does not exist, please consult with your success manager.
  4. Please follow the steps in your Partner -> Integrations -> Applications page to continue configuring your Remote Monitoring & Management Tool.

Deploying the Auvik SaaS Management (Saaslio) Agent WITHOUT a Remote Monitoring & Management Tool (RMM)

(Windows) Installing the Desktop Agent with SSO & Using Group Policy to Deploy Browser Extensions 

  1. Next, login to the workstation(s) where you will be installing Auvik SaaS Management (Saaslio).  
  2. Open a Command Prompt as Administrator. 
  3. Run the command for Windows that was retrieved in the step Retrieving your Deployment Script for Windows or Mac Distribution
  4. On next unlock, your user will automatically register in within the Auvik SaaS Management (Saaslio) platform using SSO 

Note: For deployments using Microsoft Intune, Labtech, or any other automatic deployment tools, you should only need to add the one command from step Retrieving your Deployment Script for Windows or Mac Distribution

Note: Since sideloading requires user engagement to confirm the application, we recommend following the subsequent steps for deploying the browser extension.

(Mac) Installing the Desktop Agent with a Mobile Device Management Tool (MDM)

  1. Upload the macOS Custom Profiles to your MDM
  2. Custom Profile for macOS versions Big Sur (11.0) or greater
  3. Custom Profile for macOS versions earlier than Big Sur (<11.0)
  4. Upload the Saaslio App to your MDM
  5. Deploy the relevant Custom Profile and Auvik SaaS Management (Saaslio) App to your macOS devices
  6. Next, login to the workstation(s) where you will be installing Saaslio.  
  7. Open the Terminal as Administrator. 
  8. Run the command to setup MDM for MacOS that was retrieved in the step Retrieving your Deployment Script for Windows or Mac Distribution

    Note: Users on MacOS will register as Devices

(Mac) Installing the Desktop Agent Manually

  1. Next, login to the workstation(s) where you will be installing Auvik SaaS Management (Saaslio).  
  2. Open the Terminal as Administrator. 
  3. Run the command for MacOS that was retrieved in the step Retrieving your Deployment Script for Windows or Mac Distribution
  4. Saaslio must then be granted Accessibility Rights in System Preferences.
  5. On device restart, your user will automatically register with the Auvik SaaS Management (Saaslio) platform and will have the Auvik SaaS Management (Saaslio) Browser Extension installed.
    Note: Users on MacOS will register as Devices

Browser Extension ADMX/ADM Files

Google:
https://chromeenterprise.google/browser/download/#download (adm/admx templates)

Firefox:
https://github.com/mozilla/policy-templates/releases (admx templates)

Edge:
https://www.microsoft.com/en-us/edge/business/download (admx templates)

Installing Browser Extensions 

There are two types of policy templates available, an ADM and an ADMX  template. You’ll want to verify which template type you can use on your network  (ADM templates are designed for Windows XP / Server 2003, whereas ADMX  templates are for Windows Vista onwards.). These templates show which registry keys you can set to configure your browser, and what the acceptable values are. 

The browser looks at the values set in these registry keys to determine how to act. 

Installing Browser Extensions / Google Chrome 

  1. Download Google Chrome templates and documentation
  2. Unpack downloaded zip file. You’ll see folders ‘windows’ and ‘common’.  Open ‘windows’ folder and then open folder ‘admx’ (or ‘adm’ if on  Windows XP / Server 2003).
  3. Copy file ‘chrome.admx’ and appropriate local folder (for example folder  ‘en-US’) to folder where policy definitions on your computer are stored  (usually c:\Windows\PolicyDefinitions\). If you are on Windows XP / Server  2003, just copy appropriate ‘chrome.adm’ file (for example ‘en US\chrome.adm’).
  4. Click on Start button, type ‘Run’ and click ‘Enter’. Run popup window will  open. 
  5. Type ‘gpedit.msc’ and click OK. Local Computer Policy Editor will open.
  6. Navigate to Local Computer Policy > Computer Configuration >  Administrative Templates > Google > Google Chrome > Extensions. 
  7. Double-click item ‘Configure the list of force-installed apps and extensions’.  Popup window will open.
  8. Select the ‘Enabled’ radio button and click the ‘Show’ button. ‘Show Contents’  popup window will open. 
  9. Enter the following value into the text field and click the OK button. kieikihnfebppciimgpalbdjkjiahnlk;https://clients2.google.com/service/update2/crx
  10. Click the OK button in ‘Configure the list of force-installed apps and  extensions’ and close ‘Local Group Editor’ window 

Installing Browser Extensions / Mozilla Firefox

  1. Download the Policy Templates for Firefox.
  2. Copy the file in your Domain Controller, unzip the folder and copy the .admx file in C:\Windows\PolicyDefinitions and the .adml file corresponding to your language to C:\Windows\PolicyDefinitions\en-US
  3. Go to the Group Policy Management > User Configuration > Policies > Administrative Templates > Mozilla > Firefox > Extensions
  4. Select extensions to install > select Enabled > click Show...
  5. Enter the following URL in the Value field: saaslio@saaslio.com
  6. Click OK.

Installing Browser Extensions / Internet Explorer Edge  (Chromium-Based)

  1. Download the Policy Templates if you have not already
  2. In Group Policy Editor, create a new GPO for the Auvik SaaS Management (Saaslio) install (or attach it to a current one).
  3. Go to User Configuration > Policies > Administrative Templates > Microsoft Edge > Extension
  4. Select Control which extensions are installed silently
  5. Enable - Show.. - and enter in the following string. This is the following inthe value field: fbgiiopidibajnhdbmfcbgjkdmehhjck;https://edge.microsoft.com/extensionwebstorebase/v1/crx
  6. Click OK and Apply the Group Policy to the desired scope.

Forcing Group Policy To Update

  1. The following command can be run in Powershell as Admin to force group policy updates. gpupdate /force

* See the following article to learn more about gpupdate /force, and how it works. https://lazyadmin.nl/it/gpupdate-force-command/

Uninstalling Auvik SaaS Management (Saaslio)

Windows

  1. The following command can be run in Powershell as Admin to uninstall Auvik SaaS Management (Saaslio) on the target device:
    Invoke-WebRequesthttps://deploy.saaslio.com/uninstall -O uninstall.ps1; Get-Content uninstall.ps1 | powershell.exe -noprofile -; Remove-Item uninstall.ps1

Mac

  1. The following command can be run in Terminal to uninstall Saaslio on the target device:
    sudo /Library/Saaslio/Saaslio --remove

Debugging Auvik SaaS Management (Saaslio)

Windows

  1. The following command can be run in Powershell as Admin to send a Debug to Auvik SaaS Management (Saaslio) Support
    C:/Program Files/Saaslio/win-latest/Saaslio-x64.exe --debug

Mac

  1. The following command can be run in Powershell as Admin to send a Debug to Auvik SaaS Management (Saaslio) Support sudo /Library/Saaslio/Saaslio --debug
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request