You can template the ~/.step/config/defaults.json
file with Ansible with the different redirect URL:
[jdoss@sw-0608 config]$ ll ~/.step/config/defaults.json
-rw-r--r--. 1 jdoss jdoss 253 Feb 9 19:50 /home/jdoss/.step/config/defaults.json
[jdoss@sw-0608 config]$ cat ~/.step/config/defaults.json
{
"ca-url": "<https://ssh.joetest.ca.smallstep.com>",
"fingerprint": "snip",
"root": "/home/jdoss/.step/certs/root_ca.crt",
"redirect-url": "<https://smallstep.com/app/teams/sso/success>"
}
You can create a fresh client and step ssh config --team name
and then see the files it puts down initially
[jdoss@sw-0608 ~]$ tree .step/
.step/
├── certs
│ └── root_ca.crt
├── config
│ ├── defaults.json
│ └── identity.json
├── identity
│ ├── identity.crt
│ └── identity_key
└── ssh
├── config
├── includes
└── known_hosts
We have had another customer that wants to template these per user on workstation provision which is fine but the .crt
and key files are pulled down by the step ssh login
. You should be fine to template at least defaults.json