From dae752c094a7c488e85ab04aa2d855f61b96a8da Mon Sep 17 00:00:00 2001 From: Josh Drake Date: Sun, 13 Sep 2026 11:40:57 -0500 Subject: [PATCH] Land the redesigned docs tree (phase 1) The sidebar now describes one platform organized by the reader's question: Start here, Learn, Use cases, Platform (Concepts, Inventory, Trust, Credentials, Verifiers, Audit), Automate, Reference, Troubleshooting, and Open source. Every existing page is slotted into the new tree unchanged, including the two pages that had no manifest entry (the VPN client guide, now under VPN) and the generated step CLI reference, carried verbatim. The Practical Zero Trust index and the retired ACME page leave the manifest; their redirects land with the site cutover. Five pages the tree needs but that are not yet written exist as short hidden stubs (Quickstart, For coding agents, How Smallstep hosts step-ca, SSO device factor, MCP servers) so the manifest resolves in full. The Certificate Manager, Smallstep SSH, and Registration Authorities introductions open with a note saying where their content now lives; the pages and their URLs stay. The docs index offers three doors (evaluating, building, operating), the use cases, and the open-source section instead of product cards. Every manifest path resolves to a file and no hand-written page is orphaned; the link check passes on every changed page. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01NZTV2L582SYSGwfbEQyrQL --- README.mdx | 90 +++-- certificate-manager/README.mdx | 5 + learn/how-smallstep-hosts-step-ca.mdx | 8 + manifest.json | 509 ++++++++++++++------------ registration-authorities/README.mdx | 5 + ssh/README.mdx | 5 + start-here/for-coding-agents.mdx | 8 + start-here/quickstart.mdx | 8 + use-cases/mcp-servers.mdx | 8 + use-cases/sso-device-factor.mdx | 8 + 10 files changed, 402 insertions(+), 252 deletions(-) create mode 100644 learn/how-smallstep-hosts-step-ca.mdx create mode 100644 start-here/for-coding-agents.mdx create mode 100644 start-here/quickstart.mdx create mode 100644 use-cases/mcp-servers.mdx create mode 100644 use-cases/sso-device-factor.mdx diff --git a/README.mdx b/README.mdx index 433d019b..a89547c9 100644 --- a/README.mdx +++ b/README.mdx @@ -2,61 +2,101 @@ disableSidebar: true --- +## Start here +
+
+ +## Use cases + +
+ + + + + +
+ +## Open source + +
-
diff --git a/certificate-manager/README.mdx b/certificate-manager/README.mdx index 6337e18f..413a4234 100644 --- a/certificate-manager/README.mdx +++ b/certificate-manager/README.mdx @@ -5,6 +5,11 @@ html_title: Certificate Manager Documentation Hub Overview description: Complete guide to Smallstep Certificate Manager. Simplify enterprise PKI with automated certificate lifecycle management at scale easily. --- + + Certificate Manager is now part of Trust +
The hosted certificate authority, its authorities, issuance methods, templates, and certificates are documented under the platform's Trust and Credentials sections. These pages stay while that move completes, and every link to them keeps working.
+ + Smallstep Certificate Manager is a commercial product built on `step-ca` that delivers a highly available hosted certificate authorities, expiry notifications and alerts, a management console, Active Revocation, API, and other features. With Smallstep Certificate Manager, you can easily issue private TLS/SSL certificates to all your things. [Learn more here.](https://smallstep.com/certificate-manager) If you need to manage devices or workloads that are not supported yet, then you can use Certificate Manager to tinker a solution. diff --git a/learn/how-smallstep-hosts-step-ca.mdx b/learn/how-smallstep-hosts-step-ca.mdx new file mode 100644 index 00000000..62653c44 --- /dev/null +++ b/learn/how-smallstep-hosts-step-ca.mdx @@ -0,0 +1,8 @@ +--- +updated_at: September 13, 2026 +title: How Smallstep hosts step-ca +html_title: How Smallstep hosts step-ca +description: What a hosted authority shares with open-source step-ca, what the platform adds, and which page to read for each job. +--- + +A hosted authority is a step-ca. This page will say what is the same (provisioner types, which the platform calls issuance methods; templates; ACME; issuance policies; webhooks), what the platform adds (an inventory, hardware-attested issuance, credentials, verifiers, policy modes, audit), and which page to read for each job. Until it lands, the open-source [step-ca documentation](../step-ca/README.mdx) describes the shared mechanics. diff --git a/manifest.json b/manifest.json index e64f1c7d..e7bdb94e 100644 --- a/manifest.json +++ b/manifest.json @@ -8,326 +8,380 @@ "path": "/README.mdx" }, { - "hideFromSidebar": true, - "title": "Design Document", - "path": "/design-document.mdx" + "heading": true, + "title": "Start here" + }, + { + "title": "How Smallstep works", + "path": "/platform/README.mdx" + }, + { + "title": "Quickstart", + "path": "/start-here/quickstart.mdx", + "hideFromSidebar": true + }, + { + "title": "For coding agents", + "path": "/start-here/for-coding-agents.mdx", + "hideFromSidebar": true }, { "heading": true, - "title": "Platform" + "title": "Learn" + }, + { + "title": "Attestation explained", + "path": "/platform/core-concepts.mdx" + }, + { + "title": "How Smallstep hosts step-ca", + "path": "/learn/how-smallstep-hosts-step-ca.mdx", + "hideFromSidebar": true + }, + { + "heading": true, + "title": "Use cases" + }, + { + "title": "Wi-Fi", + "path": "/tutorials/protect-wireless-networks.mdx" + }, + { + "title": "Wired", + "path": "/tutorials/protect-wired-networks.mdx" }, { - "title": "About Smallstep", + "title": "VPN", "routes": [ { - "title": "Overview", - "path": "/platform/README.mdx" + "title": "Set up certificate-based VPN", + "path": "/tutorials/vpn-setup-guide.mdx" + }, + { + "title": "VPN clients", + "path": "/tutorials/vpn-client-setup-guide.mdx" }, { - "title": "Core Concepts", - "path": "/platform/core-concepts.mdx" + "title": "strongSwan", + "path": "/tutorials/vpn-setup-guide-strongswan.mdx" }, { - "title": "Smallstep API", - "path": "/platform/smallstep-api.mdx" + "title": "F5", + "path": "/tutorials/vpn-setup-guide-f5.mdx" + }, + { + "title": "Azure VPN Gateway", + "path": "/tutorials/vpn-setup-guide-azure-vng.mdx" } ] }, { - "title": "Add Devices to Smallstep", + "title": "Web apps (mTLS)", + "path": "/tutorials/browser-certificate-setup-guide.mdx" + }, + { + "title": "SSO device factor", + "path": "/use-cases/sso-device-factor.mdx", + "hideFromSidebar": true + }, + { + "title": "SSH", "routes": [ { - "title": "Build Your Inventory", - "path": "/platform/enrollment-guide.mdx" + "title": "Introduction", + "path": "/ssh/README.mdx" }, { - "title": "Connect Google Workspace", - "path": "/tutorials/connect-google-workspace-to-smallstep.mdx" + "title": "How it works", + "path": "/ssh/how-it-works.mdx" }, { - "title": "Connect Intune (Windows)", - "path": "/tutorials/connect-intune-to-smallstep.mdx" + "title": "Client quickstart", + "path": "/ssh/client.mdx" }, { - "title": "Connect Intune (macOS)", - "path": "/tutorials/connect-intune-to-smallstep-macos.mdx" + "title": "Host quickstart", + "path": "/ssh/hosts.mdx" }, { - "title": "Connect Mosyle", - "path": "/tutorials/connect-mosyle-to-smallstep.mdx" + "title": "Step by step host guide", + "path": "/ssh/hosts-step-by-step.mdx", + "hideFromSidebar": true }, { - "title": "Connect Jamf Pro", - "path": "/tutorials/connect-jamf-pro-to-smallstep.mdx" + "title": "Access control", + "path": "/ssh/acls.mdx" }, { - "title": "Connect Workspace One UEM (Windows)", - "path": "/tutorials/connect-workspace-one-to-smallstep.mdx" + "title": "Entra ID", + "path": "/ssh/azure-ad.mdx" }, { - "title": "Connect Workspace One UEM (macOS)", - "path": "/tutorials/connect-workspace-one-to-smallstep-macos.mdx" + "title": "Google Workspace", + "path": "/ssh/g-suite.mdx" }, { - "title": "Connect Iru", - "path": "/tutorials/connect-iru-to-smallstep.mdx" + "title": "Okta", + "path": "/ssh/okta.mdx" }, { - "title": "Connect JumpCloud (Windows)", - "path": "/tutorials/connect-jumpcloud-to-smallstep.mdx" + "title": "Okta UID and GID sync", + "path": "/ssh/okta-gid-uid.mdx" }, { - "title": "Connect Fleet DM", - "path": "/tutorials/connect-fleet-dm-to-smallstep.mdx" + "title": "GitHub", + "path": "/tutorials/protect-github-ssh.mdx" } ] }, { - "title": "Configure Devices for Smallstep", + "title": "Workloads", "routes": [ { - "title": "Install the Smallstep Agent", - "path": "/platform/smallstep-agent.mdx" - }, - { - "title": "Troubleshooting Guide", - "path": "/platform/troubleshooting-agent.mdx" - }, - { - "title": "Configure Browser Certificates", - "path": "/tutorials/browser-certificate-setup-guide.mdx" - }, - { - "title": "Configure ChromeOS Device Identity Certificates", - "path": "/tutorials/chromeos-device-identity-certificates.mdx" - }, - { - "title": "Configure Enterprise Relay", - "path": "/tutorials/configure-enterprise-relay.mdx" + "title": "Kubernetes TLS", + "path": "/certificate-manager/kubernetes-tls/README.mdx", + "routes": [ + { + "title": "Kubernetes install", + "path": "/certificate-manager/kubernetes-tls/kubernetes-install.mdx", + "hideFromSidebar": true + }, + { + "title": "step-issuer", + "path": "/certificate-manager/kubernetes-tls/kubernetes-step-issuer.mdx", + "hideFromSidebar": true + }, + { + "title": "autocert", + "path": "/certificate-manager/kubernetes-tls/kubernetes-autocert.mdx", + "hideFromSidebar": true + }, + { + "title": "Ingress TLS", + "path": "/certificate-manager/kubernetes-tls/kubernetes-ingress-tls.mdx", + "hideFromSidebar": true + }, + { + "title": "Container TLS", + "path": "/certificate-manager/kubernetes-tls/kubernetes-container-tls.mdx", + "hideFromSidebar": true + } + ] } ] }, { - "title": "Add Users to Smallstep", - "routes": [ - { - "title": "Sync Okta Users", - "path": "/tutorials/sync-okta-users-to-smallstep.mdx" - }, - { - "title": "Sync Google Workspace Users", - "path": "/tutorials/sync-google-workspace-users-to-smallstep.mdx" - }, - { - "title": "Sync Entra ID Users", - "path": "/tutorials/sync-entra-id-users-to-smallstep.mdx" - } - ] + "title": "MCP servers", + "path": "/use-cases/mcp-servers.mdx", + "hideFromSidebar": true }, { - "title": "Protect", - "routes": [ - { - "title": "Wireless Networks", - "path": "/tutorials/protect-wireless-networks.mdx" - }, - { - "title": "Wired Networks", - "path": "/tutorials/protect-wired-networks.mdx" - }, - { - "title": "SSH for GitHub", - "path": "/tutorials/protect-github-ssh.mdx" - } - ] + "heading": true, + "title": "Concepts" }, { - "title": "Smallstep for Certificate-Based VPN", + "title": "Trust (Certificate Manager core concepts)", + "path": "/certificate-manager/core-concepts.mdx" + }, + { + "title": "Trust (Certificate Manager how it works)", + "path": "/certificate-manager/how-it-works.mdx" + }, + { + "heading": true, + "title": "Inventory" + }, + { + "title": "Enrollment", "routes": [ { - "title": "Set up certificate-based VPN with Smallstep", - "path": "/tutorials/vpn-setup-guide.mdx" + "title": "Build your inventory", + "path": "/platform/enrollment-guide.mdx" }, { - "title": "Set up strongSwan VPN with Smallstep", - "path": "/tutorials/vpn-setup-guide-strongswan.mdx" + "title": "Google Workspace", + "path": "/tutorials/connect-google-workspace-to-smallstep.mdx" }, { - "title": "Set up F5 VPN with Smallstep", - "path": "/tutorials/vpn-setup-guide-f5.mdx" + "title": "Intune (Windows)", + "path": "/tutorials/connect-intune-to-smallstep.mdx" }, { - "title": "Set up Azure VPN with Smallstep", - "path": "/tutorials/vpn-setup-guide-azure-vng.mdx" - } - ] - }, - { - "heading": true, - "title": "Products" - }, - { - "title": "Smallstep SSH", - "routes": [ + "title": "Intune (macOS)", + "path": "/tutorials/connect-intune-to-smallstep-macos.mdx" + }, { - "title": "Introduction", - "path": "/ssh/README.mdx" + "title": "Mosyle", + "path": "/tutorials/connect-mosyle-to-smallstep.mdx" }, { - "title": "How It Works", - "path": "/ssh/how-it-works.mdx" + "title": "Jamf Pro", + "path": "/tutorials/connect-jamf-pro-to-smallstep.mdx" }, { - "title": "Client Quickstart Guide", - "path": "/ssh/client.mdx" + "title": "Workspace ONE (Windows)", + "path": "/tutorials/connect-workspace-one-to-smallstep.mdx" }, { - "title": "Host Quickstart Guide", - "path": "/ssh/hosts.mdx" + "title": "Workspace ONE (macOS)", + "path": "/tutorials/connect-workspace-one-to-smallstep-macos.mdx" }, { - "title": "Access Control Guide", - "path": "/ssh/acls.mdx" + "title": "Iru", + "path": "/tutorials/connect-iru-to-smallstep.mdx" }, { - "title": "Entra ID Quickstart Guide", - "path": "/ssh/azure-ad.mdx" + "title": "JumpCloud (Windows)", + "path": "/tutorials/connect-jumpcloud-to-smallstep.mdx" }, { - "title": "Google Workspace Quickstart Guide", - "path": "/ssh/g-suite.mdx" + "title": "Fleet", + "path": "/tutorials/connect-fleet-dm-to-smallstep.mdx" }, { - "title": "Okta Quickstart Guide", - "path": "/ssh/okta.mdx" + "title": "ChromeOS", + "path": "/tutorials/chromeos-device-identity-certificates.mdx" + } + ] + }, + { + "title": "Users", + "routes": [ + { + "title": "Okta", + "path": "/tutorials/sync-okta-users-to-smallstep.mdx" }, { - "title": "Okta UID GID Sync Guide", - "path": "/ssh/okta-gid-uid.mdx" + "title": "Google Workspace", + "path": "/tutorials/sync-google-workspace-users-to-smallstep.mdx" }, { - "hideFromSidebar": true, - "title": "Step by Step Guide", - "path": "/ssh/hosts-step-by-step.mdx" + "title": "Entra ID", + "path": "/tutorials/sync-entra-id-users-to-smallstep.mdx" } ] }, { - "title": "Certificate Manager", + "heading": true, + "title": "Trust" + }, + { + "title": "Authorities", "routes": [ { - "title": "Introduction", + "title": "Certificate Manager (landing note)", "path": "/certificate-manager/README.mdx" }, { - "title": "Getting Started", + "title": "Create a hosted authority", "path": "/certificate-manager/getting-started.mdx" }, { - "title": "Basic Cert Operations", - "path": "/certificate-manager/basic-ops.mdx" - }, - { - "title": "Customizing Certificates", - "path": "/certificate-manager/custom-certs.mdx" + "title": "Bring your own root", + "path": "/certificate-manager/byo-root.mdx" }, { - "title": "Core Concepts", - "path": "/certificate-manager/core-concepts.mdx" + "title": "Registration authorities", + "path": "/registration-authorities/README.mdx" }, { - "title": "How It Works", - "path": "/certificate-manager/how-it-works.mdx" + "title": "ACME registration authority", + "path": "/registration-authorities/acme-for-certificate-manager.mdx" }, { - "title": "Webhook Events", - "path": "/certificate-manager/webhook-events.mdx" - }, + "title": "ACME for Google CAS", + "path": "/registration-authorities/acme-for-cas.mdx" + } + ] + }, + { + "title": "Issuance methods", + "routes": [ { - "title": "ACME Server", + "title": "ACME", "path": "/certificate-manager/acme/README.mdx", "routes": [ { - "hideFromSidebar": true, - "title": "ACME How", - "path": "/certificate-manager/acme/how-to-use-acme.mdx" + "title": "How to use ACME", + "path": "/certificate-manager/acme/how-to-use-acme.mdx", + "hideFromSidebar": true }, { - "hideFromSidebar": true, - "title": "ACME When", - "path": "/certificate-manager/acme/when-to-use-acme.mdx" + "title": "When to use ACME", + "path": "/certificate-manager/acme/when-to-use-acme.mdx", + "hideFromSidebar": true }, { - "hideFromSidebar": true, - "title": "ACME Why", - "path": "/certificate-manager/acme/why-use-acme.mdx" + "title": "Why use ACME", + "path": "/certificate-manager/acme/why-use-acme.mdx", + "hideFromSidebar": true } ] }, { - "title": "Certs For Humans", + "title": "SSO (OIDC)", "path": "/certificate-manager/oidc.mdx" - }, - { - "title": "Bring Your Own Root", - "path": "/certificate-manager/byo-root.mdx" - }, - { - "title": "Kubernetes TLS", - "path": "/certificate-manager/kubernetes-tls/README.mdx", - "routes": [ - { - "hideFromSidebar": true, - "title": "Kubernetes autocert", - "path": "/certificate-manager/kubernetes-tls/kubernetes-autocert.mdx" - }, - { - "hideFromSidebar": true, - "title": "Kubernetes container tls", - "path": "/certificate-manager/kubernetes-tls/kubernetes-container-tls.mdx" - }, - { - "hideFromSidebar": true, - "title": "Kubernetes ingress tls", - "path": "/certificate-manager/kubernetes-tls/kubernetes-ingress-tls.mdx" - }, - { - "hideFromSidebar": true, - "title": "Kubernetes install", - "path": "/certificate-manager/kubernetes-tls/kubernetes-install.mdx" - }, - { - "hideFromSidebar": true, - "title": "Kubernetes step issuer", - "path": "/certificate-manager/kubernetes-tls/kubernetes-step-issuer.mdx" - } - ] } ] }, { - "title": "Registration Authorities", - "routes": [ - { - "title": "Introduction", - "path": "/registration-authorities/README.mdx" - }, - { - "title": "ACME for Smallstep Certificate Manager", - "path": "/registration-authorities/acme-for-certificate-manager.mdx" - }, - { - "title": "ACME for Google Certificate Authority Service", - "path": "/registration-authorities/acme-for-cas.mdx" - } - ] + "title": "Issue certificates with your own clients", + "path": "/certificate-manager/basic-ops.mdx" + }, + { + "heading": true, + "title": "Credentials" + }, + { + "title": "Templates", + "path": "/certificate-manager/custom-certs.mdx" }, { "heading": true, - "title": "Open Source" + "title": "Verifiers" }, { - "title": "Step CLI", + "title": "Relays", + "path": "/tutorials/configure-enterprise-relay.mdx" + }, + { + "heading": true, + "title": "Audit" + }, + { + "title": "Webhooks", + "path": "/certificate-manager/webhook-events.mdx" + }, + { + "heading": true, + "title": "Automate" + }, + { + "title": "REST API", + "path": "/platform/smallstep-api.mdx" + }, + { + "heading": true, + "title": "Reference" + }, + { + "title": "Install the agent", + "path": "/platform/smallstep-agent.mdx" + }, + { + "heading": true, + "title": "Troubleshooting" + }, + { + "title": "Agent", + "path": "/platform/troubleshooting-agent.mdx" + }, + { + "heading": true, + "title": "Open source" + }, + { + "title": "step CLI", "routes": [ { "title": "Introduction", @@ -338,11 +392,11 @@ "path": "/step-cli/installation.mdx" }, { - "title": "The `step` Command", + "title": "The `step` command", "path": "/step-cli/the-step-command.mdx" }, { - "title": "Basic Crypto Operations", + "title": "Basic crypto operations", "path": "/step-cli/basic-crypto-operations.mdx" }, { @@ -1540,7 +1594,7 @@ ] }, { - "title": "Step CA", + "title": "step-ca", "routes": [ { "title": "Introduction", @@ -1551,19 +1605,19 @@ "path": "/step-ca/installation.mdx" }, { - "title": "Core Concepts", + "title": "Core concepts", "path": "/step-ca/certificate-authority-core-concepts.mdx" }, { - "title": "Getting Started", + "title": "Getting started", "path": "/step-ca/getting-started.mdx" }, { - "title": "Basic CA Operations", + "title": "Basic CA operations", "path": "/step-ca/basic-certificate-authority-operations.mdx" }, { - "title": "ACME Basics", + "title": "ACME basics", "path": "/step-ca/acme-basics.mdx" }, { @@ -1587,7 +1641,7 @@ "path": "/step-ca/webhooks.mdx" }, { - "title": "Production Considerations", + "title": "Production considerations", "path": "/step-ca/certificate-authority-server-production.mdx" }, { @@ -1599,72 +1653,73 @@ "path": "/step-ca/revocation.mdx" }, { - "title": "Registration Authority Mode", + "title": "Registration authority mode", "path": "/step-ca/registration-authority-ra-mode.mdx" }, { - "title": "Cryptographic Protection", + "title": "Cryptographic protection", "path": "/step-ca/cryptographic-protection.mdx" }, { "title": "Integrations", "path": "/step-ca/integrations.mdx" + }, + { + "title": "Design document", + "path": "/design-document.mdx", + "hideFromSidebar": true } ] }, - { - "title": "Practical Zero Trust", - "path": "/practical-zero-trust/README.mdx" - }, { "title": "Hello mTLS", "path": "/mtls/README.mdx" }, { - "title": "Tutorials", + "title": "step-ca tutorials", "routes": [ { "title": "Introduction", "path": "/tutorials/README.mdx" }, { - "title": "Configure popular ACME clients to use a private CA", + "title": "Configure popular ACME clients", "path": "/tutorials/acme-protocol-acme-clients.mdx" }, { - "title": "Use Kubernetes cert-manager with `step-ca`", + "title": "Kubernetes cert-manager with step-ca", "path": "/tutorials/kubernetes-acme-ca.mdx" }, { - "title": "Issue X.509 host certificates to cloud VMs", + "title": "X.509 certificates for cloud VMs", "path": "/tutorials/cloud-vm-certificate.mdx" }, { - "title": "Issue X.509 user certificates via your identity provider", + "title": "User certificates via your identity provider", "path": "/tutorials/user-authentication.mdx" }, { - "title": "Create a CA that uses RSA keys", + "title": "A CA with RSA keys", "path": "/tutorials/rsa-chain.mdx" }, { - "title": "Import an existing root or intermediate CA into `step-ca`", + "title": "Import an existing root or intermediate", "path": "/tutorials/intermediate-ca-new-ca.mdx" }, { - "title": "Use Keycloak to issue SSH certificates with step-ca", + "title": "Keycloak SSH certificates", "path": "/tutorials/keycloak-oidc-provisioner.mdx" }, { - "title": "Run an SSH CA and connect to VMs using SSH certificates", + "title": "Run an SSH CA", "path": "/tutorials/ssh-certificate-login.mdx" }, { - "title": "Run `step-ca` in a Docker container", + "title": "step-ca in Docker", "path": "/tutorials/docker-tls-certificate-authority.mdx" }, { - "title": "Federate multiple autonomous certificate authorities", + "title": "Federate multiple CAs", "path": "/tutorials/pki-trust-model-federation.mdx" } ] diff --git a/registration-authorities/README.mdx b/registration-authorities/README.mdx index ad52f879..82a4eb70 100644 --- a/registration-authorities/README.mdx +++ b/registration-authorities/README.mdx @@ -5,6 +5,11 @@ html_title: Registration Authorities Implementation description: Implement Registration Authorities for distributed PKI. Scale certificate issuance across multiple locations and security zones. --- + + Registration authorities are documented under Trust +
A registration authority in front of a hosted authority is a Trust concept; the step-ca registration authority mode is in the open-source section. These pages stay while that move completes.
+ + Smallstep Registration Authorities (RA) provide automated enrollment and renewal of certificates using modern techniques while extending your existing internal PKI. Smallstep RAs act narrowly as a _registration authority_, accepting certificate orders, and authenticating certificate requests. Smallstep RAs do not sign certificates. Instead, certificate requests are passed to your existing PKI infrastructure to sign and catalog. Benefits of this approach include: * Issued certificates are trusted by anything that trusts your PKI root certificate. diff --git a/ssh/README.mdx b/ssh/README.mdx index 6e9a1bc5..22a56744 100644 --- a/ssh/README.mdx +++ b/ssh/README.mdx @@ -5,6 +5,11 @@ html_title: SSH Certificate Documentation Overview description: Complete SSH certificate documentation for enterprises. Replace SSH keys with short-lived certificates for better security and compliance. --- + + Smallstep SSH is now the SSH use case +
Host management, single sign-on user certificates, and device-bound user certificates are one SSH use case on the platform. These pages stay while the guide that replaces them is written, and every link to them keeps working.
+ + Smallstep SSH is a commercial product that delivers a complete end-to-end SSH workflow combining the benefits of modern identity providers, SSH certificates, and proven standard technologies like OpenSSH and OAuth. The Professional diff --git a/start-here/for-coding-agents.mdx b/start-here/for-coding-agents.mdx new file mode 100644 index 00000000..c9aa5129 --- /dev/null +++ b/start-here/for-coding-agents.mdx @@ -0,0 +1,8 @@ +--- +updated_at: September 13, 2026 +title: For coding agents +html_title: For coding agents +description: How an agent reads these docs: llms.txt, Markdown per page, the docs MCP, and one skill per use case. +--- + +Everything on this site will be readable by an agent: an index at `llms.txt`, every page as Markdown, a docs MCP endpoint, and one skill per use-case guide. This page describes them once they exist. diff --git a/start-here/quickstart.mdx b/start-here/quickstart.mdx new file mode 100644 index 00000000..6fa449eb --- /dev/null +++ b/start-here/quickstart.mdx @@ -0,0 +1,8 @@ +--- +updated_at: September 13, 2026 +title: Quickstart +html_title: Quickstart +description: Your first device and your first credential in about twenty minutes. +--- + +The shortest path from a team with devices to one device that just got onto a resource with a certificate. It is being written as part of the docs redesign; until it lands, start with the [Wi-Fi guide](../tutorials/protect-wireless-networks.mdx). diff --git a/use-cases/mcp-servers.mdx b/use-cases/mcp-servers.mdx new file mode 100644 index 00000000..04c9678d --- /dev/null +++ b/use-cases/mcp-servers.mdx @@ -0,0 +1,8 @@ +--- +updated_at: September 13, 2026 +title: MCP servers (AI agents) +html_title: MCP servers (AI agents) +description: Put your MCP servers behind the Smallstep MCP gateway so only enrolled devices and allowed tools get through. +--- + +This guide is written for a capability that is not yet generally available; it is published when the MCP gateway leaves internal use. diff --git a/use-cases/sso-device-factor.mdx b/use-cases/sso-device-factor.mdx new file mode 100644 index 00000000..998b2c1c --- /dev/null +++ b/use-cases/sso-device-factor.mdx @@ -0,0 +1,8 @@ +--- +updated_at: September 13, 2026 +title: SSO device factor +html_title: SSO device factor +description: Require a device certificate at sign-in with the Smallstep device factor. +--- + +This guide will replace the page on howto.smallstep.com and follow the same nine steps as every use-case guide. It is being validated against the product before it is published.