FreeSCIM Infrastructure Control | Foreman, Puppet, Classrooms and Guacamole

Foreman and Puppet enrichment

Reviewed Foreman exports and read-only PuppetDB facts enrich the workstation model with host identity, interfaces, MAC addresses, host groups, operating-system facts, environment context, and fleet readiness. Dry-run import, timestamped backups, conflict detection, and field-preserving merges prevent inventory enrichment from becoming an uncontrolled overwrite.

Classroom control surfaces

Fleet and room views

Room cards, floor plans, grouped host views, per-seat state, health chips, console readiness, and data provenance.

Per-seat power

WoL through room-aware relays, plus bounded SSH reboot and power-off paths with mandatory reasons and audit evidence.

Remote console

Inventory-driven Guacamole SSH and VNC plans, tokenized launches, jump-vantage probes, and dedicated relay selection.

VNC vortex

On-demand VNC activation and jump-spoke creation rather than a permanently exposed fleet-wide listener.

Dedicated jump paths

Console readiness is evaluated from the relay vantage point that will actually reach the workstation. Guacamole sessions are routed through dedicated jump and guacd paths, with separate stacks where network boundaries require them. The platform records the selected relay, probe result, launchability, blocker, session action, and operator context.

Safety model

Bulk room wake can remain disabled while precise per-seat actions are available.
Power and console actions require explicit authorization and evidence.
Remote credentials and deploy keys remain outside the repository.
Disposable guest identities are separated from scoped remote-support service identities.
Configured, cached, and live endpoint states are labeled so stale probes do not override jump-vantage evidence.

A true infrastructure control plane

FreeSCIM does not only know that a user should exist. It can show which workstation they may reach, what Foreman and Puppet know about that host, whether it is online, how it can be awakened, which jump path can reach it, and how a bounded support session can be opened.