Cato (9 January)

CP_Source/Apps/Cato/README.md

@@ -19,4 +19,28 @@
 
 ```
 systemctl enable /custom/cato/lib/systemd/system/cato-client.service ; systemctl start cato-client.service
-```
+```
+
+-----
+
+## Authenticating with Headless SSO
+
+Headless SSO lets you authenticate on devices without a browser.
+
+To authenticate on a headless device:
+
+- On the headless device, run the command:
+
+```bash
+cato-sdp start --account <account name>--headless
+```
+A unique code and URL are returned.
+
+**Note:**
+
+- The account name is the account Subdomain. To find the Subdomain, navigate to Access > Single Sign-On.
+- For authentication without SSO, add the parameter --no-sso
+- The --headless parameter is not required in version 5.1.0.21 and higher
+- On a device that has a browser, access the URL and enter the unique code.
+- Sign in with your SSO credentials.
+- The headless device is connected to the Cato Cloud.