Skip to main content

Integrate with RustDesk Server Pro

Support level: Community

What is RustDesk Server Pro?​

RustDesk Server Pro is a premium self-hosted solution for managing remote desktop connections securely and efficiently. It offers enhanced performance, advanced security features, and customization options like branding to meet professional needs. Ideal for businesses, it provides full control over data while ensuring scalable and reliable remote access.

-- https://rustdesk.com/

This guide explains how to configure Rustdesk Server Pro to use authentik as the OAuth provider for logging in to the Web GUI.

Preparation​

This guide uses the following placeholders:

  • rustdesk.company is the FQDN of the RustDesk Server Pro installation.
  • authentik.company is the FQDN of the authentik installation.
note

This documentation lists only the settings that you need to change from their default values. Be aware that any changes other than those explicitly mentioned in this guide could cause issues accessing your application.

authentik configuration​

Create an OAuth2/OpenID provider and an application in authentik. Use the following parameters for the OAuth2/OpenID provider:

  1. In the authentik Admin interface, navigate to Applications -> Applications.
  2. Use the wizard to create a new application and provider. During this process:
    • Note the Client ID, Client Secret, and slug values for later use.
    • Select implicit or explicit authorization flow as desired.
    • Set the redirect URI to https://rustdesk.company/api/oidc/callback.
    • Select any available signing key.

RustDesk Server Pro configuration​

  1. Sign in to RustDesk Server Pro using a browser.
  2. In the left menu, select Settings and then OIDC.
  3. Click + New Auth Provider.
  4. In the popup window, select custom as the Auth Type and click OK.
  5. Configure the following values using information from the authentik provider:
    • Set Name to authentik
    • Set Client ID to the Client ID copied from authentik.
    • Set Client secret to the Client Secret copied from authentik.
    • Set Issuer to https://authentik.company/application/o/slug/
    • Set Authorization Endpoint to https://authentik.company/application/o/authorize/
    • Set Token Endpoint to https://authentik.company/application/o/token/
    • Set Userinfo Endpoint to https://authentik.company/application/o/userinfo/
    • Set JWKS Endpoint to https://authentik.company/application/o/slug/jwks/
info

Users are created automatically on login. Permissions must be assigned by an administrator after user creation.

Test the Login​

  • Open a browser and navigate to https://rustdesk.company.
  • Click Continue with authentik.
  • You should be redirected to authentik (with the login flows you configured). After logging in, authentik will redirect you back to https://rustdesk.company.
  • If you are redirected back to https://rustdesk.company and can read the username in the top right corner, the setup was successful.