Flemingo Tenant Admin

Tenant: acme | Domain: admin.acme.flemingo.net
UI not initialized (JavaScript may be blocked).

Sign in

Sign in as a tenant admin to manage this tenant’s policies.
Production note: password login is dev-only; enterprise deployments should use IdP SSO via the Keycloak redirect flow.

Users

Manage Keycloak users for this tenant. Base group: FlemingoTerminalUsers
email enabled groups

Terminal Access

Manage SSH targets and access policies (evaluated by the gateway).
Targets
id name host tags enabled
Access policies
name target priority allow deny enabled

Policies

id priority mode updated

Quick toggles (current editor policy)

Edit common fields for watermark/DLP/AI/ZTNA. The full JSON editor below is the source of truth.
Other DLP controls
AI API key
No key configured
AI connectors (allowed)

Policy editor

Edit the JSON and click Save. For updates, use PUT; for a new policy id, you can use POST.

Assignments

entity policyId assignedAt

Device Enrollment (browser)

Generate a device token and an enrollment.json for manual/MDM deployment. The plaintext token is only shown once. For local testing on macOS, place the downloaded file at: ~/Library/Application Support/Flemingo/enrollment.json
tokenHash userEmail status deviceId lastSeen expires

Raw API Output

Debug panel showing the last API response. Device token refresh returns the full token list.