Victor Lyuboslavsky

Will address migration timestamps in a separate PR.

fleet-gitops PR: https://github.com/fleetdm/fleet-gitops/pull/55/files

For NDES, the URL path looks like `/mdm/scep/proxy/{host_uuid,profile_uuid},NDES`. So, the SCEP proxy needs to parse the path and check the profile to see if the one-time secret is needed. Although...

Yes, these are essentially dynamic SCEP challenges managed entirely by Fleet.

We already have a table where we store custom CA details, so I recommend adding this there. We might even have a challenge field already that we only use for...

@noahtalerman I updated the REST API documentation (PR [here](https://github.com/fleetdm/fleet/pull/19671/files)) to reflect the implementation. The UI does not set view_pin, which defaults to false.

Also, the authors need to be added to OpenGraph in `opengraph/provider/base.html` like: ``` {{ range .Param "authors" }} {{ end -}} ```

authentik is already integrated with (and appears to be working on) Dogfood.

Note for estimation/speccing: if IdP department changes for a user, we will need to resend any configuration profiles that use the department variable.

> Hey @getvictor! Thanks for discovering this and making such an incredible demo! > > Were you able to find a way around this? Does pyautogui work in this environment,...