Rune agent
Device identity on each workstation
Small background service on the user’s PC. Holds a device key, talks to Saga/IdP on your network, and enables one-click Sign in with Rune. Not installed on the Saga server itself.
The Rune agent is security software: it stores a device private key and can sign in as the bound user. It should not run as root — use a normal user or the dedicated stech system account. Verify the SHA256 checksum; only download from this site.
Linux — one-line install
Run on the user's workstation (Debian, Ubuntu, RHEL, etc.). Requires curl and python3. No root required — installs to ~/.local/bin; use sudo only if you want a system-wide service in /var/lib.
curl -fsSL https://stech.strangstad.com/static/install-rune.sh | bash
With your Saga URL and tenant:
curl -fsSL https://stech.strangstad.com/static/install-rune.sh | SAGA_URL=https://saga.yourcompany.com TENANT=your-tenant bash
After install, enroll with the code from your admin:
stech-agent enroll --enrollment-code RUNE-XXXX-XXXX-XXXX
Downloads
After install
- Enroll — Your Saga admin gives you a one-time enrollment code (Control → Rune). Run stech-agent enroll --enrollment-code RUNE-…
- Bind — Saga admin links the device to a user in Control → Rune.
- Serve — Keep rune-agent running (systemd service or stech-agent serve).
- Sign in — Open login — the browser detects Rune on localhost and offers one-click sign-in.
Without the agent, users sign in with email OTP only. Each PC needs its own install.