Add a feature that lets admins embed third-party web apps directly inside Gorelo as a first-class tab/module. The embedded app should appear as its own icon/menu item in the left navigation, open inside Gorelo in a secure iframe/webview, and support persistent sign-in (including SSO options like Azure/Entra ID) so techs don’t have to leave the platform.
The Problem This Solves
A lot of MSP tools we rely on don’t have native integrations with every RMM/PSA. Today, that means:
Techs constantly jump between Gorelo and external tabs.
Context switching slows work and increases missed steps.
Password managers/SSO flows are repeated all day.
The platform feels fragmented when it could be a “single pane of glass.”
Even if a true integration isn’t available, embedding the tool gets you 80–90% of the workflow benefit.
How It Worked in Kaseya VSA (the model)
In VSA there was a “Web App” / embedded tool feature where you could:
Add a custom web app URL.
Give it a name + icon.
It showed up as a permanent tab in the platform menu.
Clicking it opened the app inside VSA.
Sessions stayed logged in (or used SSO like Azure) so you weren’t re-authing constantly.
This made unsupported tools feel almost native.
Proposed Behavior in Gorelo
Admin Setup
Admin goes to Settings → Integrations (or Tools) → Add Embedded App
Fields:
Name
URL
Icon (upload or pick from a set)
Visibility (which roles/teams see it)
Open Mode (embedded tab vs “open in new window” fallback)
SSO option / Auth hint (optional — see below)
User Experience
App appears as a new persistent menu item with its icon.
Clicking it opens an embedded tab inside Gorelo.
Gorelo remembers your last embedded app tab state (same way normal modules do).
Authentication / Persistence
Embedded window should retain session cookies so logins persist.
If supported, allow SSO pass-through or launching with common providers:
Azure/Entra ID
Google Workspace
SAML/OIDC
If an app blocks iframe embedding (X-Frame-Options / CSP), Gorelo should detect that and automatically fall back to open in new tab with a message like:
“This app doesn’t allow embedding; opening externally.”
Use Cases
Password vaults / documentation tools that don’t integrate yet
Vendor portals (warranty, licensing, RMA sites)
Network dashboards (UniFi, Meraki, Synology, etc.)
Billing/finance systems
Any niche MSP tool lacking native integration
Benefits
Single-pane workflow even without native integrations
Less context switching → faster ticket resolution
Cleaner daily ops for techs
Immediately adds value without Gorelo needing to build/maintain dozens of integrations
Makes Gorelo more “sticky” as the hub MSPs live in
Acceptance Criteria (what “done” looks like)
Admin can add/edit/remove embedded apps.
Embedded apps show in navigation with custom name + icon.
Apps load inside Gorelo securely.
Sessions persist like normal browser tabs.
Clear fallback when embedding is blocked.
Role-based visibility works.