Setup

Pre-requisites

1. Kasm Workspace installed, refer to the Kasm documentation.
2. Twingate account and connector deployed. Follow the Twingate Quick Start Guide.

NOTE 1: Twingate client installation is not required for the Twingate-Kasm integration.

NOTE 2: If you are using Kasm 1.15, please follow the steps outlined here to update your Kasm API service to the rolling version.

Setup Steps

Create Kasm API Key

Generate a New Kasm API Key in your Kasm Admin Console. Save the API Key and API Key Secret for future use.

Enable the created API Key and assign the following permission to the newly created API Key:

Text Only

Global Admin
Sessions Delete
Sessions Modify
Sessions View
User
Users Auth Session
Users Create
Users Delete
Users Modify
Users Modify Admin
Users View

For more details, refer to the Kasm Developer API documentation.

Add Twingate Registry to Kasm

Registry URL: https://kasm.tg-labs.net

Install Twingate Workspace in Kasm

NOTE: Currently we are support both the Twingate Chrome and Twingate Desktop images.

Configure Twingate Workspace in Kasm

Adding additional Docker Run Config Override configuration to the Twingate Workspace. Replace YOUR_TWINGATE_ACCOUNT_NAME with your Twingate account name, e.g. acme for acme.twingate.com.

Text Only

,
  "environment": {
    "ACCOUNT": "YOUR_TWINGATE_ACCOUNT_NAME"
  }

Create and Configure Twingate Group in Kasm

1. Create new Twingate group in Kasm
2. Add the Twingate workspace to the newly created group
3. Set the group Default image to the Twingate workspace
4. Add users to the Twingate group in Kasm

NOTE 1: These users must also be invited to the Twingate account to use the Twingate Agentless feature.

NOTE 2: If you haven't added all your users to Kasm yet, you could also set the Default image of the All User group to Twingate workspace.

Connect Kasm to Twingate Agentless

1. Go to {TwingateTenant}.agentless.app (e.g., acme.agentless.app).
2. Sign in using your Twingate Credential
3. Select “Link to Kasm”
   • Kasm URL: The IP address or DNS address of your Kasm workspace (e.g., https://111.111.111.111). Make sure the port 443 is open on the Kasm URL.
   • Kasm API Key: The API Key created previously.
   • Kasm API Key Secret: The API Key Secret created previously.

Try it Out

Users in the created Twingate group can now: - Go to {TwingateTenant}.agentless.app (e.g., acme.agentless.app). - Authenticate using their Twingate credentials. - Access Twingate resources in the Kasm session.

NOTE: Refer to the User Guide for detailed instructions on using Twingate Agentless.