Embedded App Tabs” (Custom Web App Embeds in Menu)

Add a feature that lets admins embed third-party web apps directly inside Gorelo as a first-class tab/module. The embedded app should appear as its own icon/menu item in the left navigation, open inside Gorelo in a secure iframe/webview, and support persistent sign-in (including SSO options like Azure/Entra ID) so techs don’t have to leave the platform.

The Problem This Solves

A lot of MSP tools we rely on don’t have native integrations with every RMM/PSA. Today, that means:

• Techs constantly jump between Gorelo and external tabs.

• Context switching slows work and increases missed steps.

• Password managers/SSO flows are repeated all day.

• The platform feels fragmented when it could be a “single pane of glass.”

Even if a true integration isn’t available, embedding the tool gets you 80–90% of the workflow benefit.

How It Worked in Kaseya VSA (the model)

In VSA there was a “Web App” / embedded tool feature where you could:

1. Add a custom web app URL.

2. Give it a name + icon.

3. It showed up as a permanent tab in the platform menu.

4. Clicking it opened the app inside VSA.

5. Sessions stayed logged in (or used SSO like Azure) so you weren’t re-authing constantly.

This made unsupported tools feel almost native.

Proposed Behavior in Gorelo

Admin Setup

• Admin goes to Settings → Integrations (or Tools) → Add Embedded App

• Fields:

  • Name

  • URL

  • Icon (upload or pick from a set)

  • Visibility (which roles/teams see it)

  • Open Mode (embedded tab vs “open in new window” fallback)

  • SSO option / Auth hint (optional — see below)

User Experience

• App appears as a new persistent menu item with its icon.

• Clicking it opens an embedded tab inside Gorelo.

• Gorelo remembers your last embedded app tab state (same way normal modules do).

Authentication / Persistence

• Embedded window should retain session cookies so logins persist.

• If supported, allow SSO pass-through or launching with common providers:

  • Azure/Entra ID

  • Google Workspace

  • SAML/OIDC

• If an app blocks iframe embedding (X-Frame-Options / CSP), Gorelo should detect that and automatically fall back to open in new tab with a message like:
  “This app doesn’t allow embedding; opening externally.”

Use Cases

• Password vaults / documentation tools that don’t integrate yet

• Vendor portals (warranty, licensing, RMA sites)

• Network dashboards (UniFi, Meraki, Synology, etc.)

• Billing/finance systems

• Any niche MSP tool lacking native integration

Benefits

• Single-pane workflow even without native integrations

• Less context switching → faster ticket resolution

• Cleaner daily ops for techs

• Immediately adds value without Gorelo needing to build/maintain dozens of integrations

• Makes Gorelo more “sticky” as the hub MSPs live in

Acceptance Criteria (what “done” looks like)

• Admin can add/edit/remove embedded apps.

• Embedded apps show in navigation with custom name + icon.

• Apps load inside Gorelo securely.

• Sessions persist like normal browser tabs.

• Clear fallback when embedding is blocked.

• Role-based visibility works.