Introduction

This article is designed to assist you with getting the initial Integration with ITGlue configured, get your customers imported from ITGlue Organizations, or match an existing Customer from the Quickpass Dashboard to an ITGlue Organization.

Prerequisites

• Ensure that you are on the IT Glue Enterprise plan which allows you access to the IT Glue API.
• Important - IT Glue Password Vault: Passwords from IT Glue that are added to the IT Glue host proof Vault are not supported. In this case neither IT Glue or Quickpass will have the ability to read and/or update the password for any matched accounts.  
• Important - IT Glue Password Security set to "Only Me": Passwords in IT Glue that have visibility security set to "Only Me" are not supported as this setting will move the password entry to the "Personal" password entries list.

 

Disclaimer: Do you have an empty IT Glue account?

 
As a new or empty IT Glue tenant, you have two options for setting up your IT Glue account: 
 
Prioritize General Passwords 
You can directly opt for integrating CyberQP first, in which we will create general passwords as we won't have visibility into any configurations/devices on IT Glue. General passwords offer stand-alone access management in IT Glue if you prefer this option. 
 
Please note that in IT Glue, embedded passwords are the only type of passwords that can appear directly on the right-hand side panel of a configuration/device with the "copy password" feature in ITG. General passwords can only be linked as a "related" item, and new ITG tenants may be unaware of the differences in security between embedded passwords and general passwords. 
 
Prioritize Embedded Passwords 
Alternatively, you can start by connecting your PSA and/or RMM integration first, build out your organizations and configurations/devices, and then connect CyberQP.  
 
We will attempt to match to existing configurations and create embedded passwords. Embedded passwords offer access management that mirrors whatever is set on the parent configuration/contacts. Please refer to IT Glues KB to understand this inheritance based security model.

 

Enable IT Glue Integration

1. As an IT Glue Administrator, log in to IT Glue and navigate to Account > Settings.
   
   
2. Click the API Keys tab
   
   
3. In the Custom API Keys section, click + to create a new custom API.
   
   
4. Type in a name for the API Key such as Quickpass-Integration, click the Password Access checkbox, and then click the Generate API Key button.
   
   
   
   
5. Copy the newly generated API key. 
   
   NOTE: If you use ITGlue IP Access Control, please refer to this KB for the IP(s) that you will have to add, in order for your ITGlue environment to allow Quickpass to communicate with ITGlue's API
   
   https://support.getquickpass.com/hc/en-us/articles/4402712146711-Firewall-Port-Exceptions-IP-Whitelisting-for-Agent-and-API-Communication
   
   
6. Log in to the Quickpass admin website at https://admin.getquickpass.com or https://eu-admin.getquickpass.com using your Quickpass Administrator account.
   
   
7. Click Integrations  in the left-hand menu.  
   
8. In the Integrations page, click the IT Glue logo.
   
   
9. You will be prompted to enter the API key you created earlier in IT Glue. Paste in the API key and select a Cloud Zone based on the location your IT Glue account is located in.  Either US Cloud (United States or Oceania), AU Cloud (Australia or NZ if using the IT Glue for that region), or EU Cloud (European Union).
   
   
   
10. Click Connect to complete the process.  The ITGlue Logo box should now show with a green indicator in the top left.
    

After the API for IT Glue is connected to Quickpass, you can begin to either import IT Glue organizations to create new Quickpass customers or match existing Quickpass customers with IT Glue organizations.

IT Glue Integration Options

• If you have never used Quickpass and have no pre-existing Quickpass customers, proceed to Option 1 – Import IT Glue Organizations as New Quickpass Customers..
• If you have pre-existing Quickpass customers, proceed to Option 2 - Matching IT Glue Organizations to Existing Quickpass Customers.

 

Option 1 - Import IT Glue Organizations as New Quickpass Customers

Importing IT Glue Organizations

1. In Quickpass, click Integrations  in the left-hand menu. 

2. Click the IT Glue logo and then Match Customers in the top-right corner.

3. You will now be presented with some filtering options for you to narrow the list of IT Glue organizations that you would like to view for Matching. Make your selections and click Select.

4. In the Match Customers page, click the checkbox on the far right side of each of the IT Glue organizations that you would like to import. This will set up Quickpass to create the new customer and link it to IT Glue. Click Save in the top right corner to complete the action.

5. If you have customers that already exist in Quickpass, but have not yet been matched to IT Glue, you may see some automatic matches, indicated by the 3 star icon. These automatic matches will link up automatically when you click Save.

6. As you're making your selections and matches, you may want to filter your view to only see specific companies. You can click the Match Status menu to reveal your filtering options.

7. If you move to one of the filtered views (Unmatched, Suggested Matches, or Matched), you will need to click Confirm Matches to proceed.

8. The Confirm Matches button will take you back to the "All" view, allowing you to review your selections and matches before clicking Save.

 

9. Once the organizations are imported, they will appear on the Quickpass Customers page. You will also notice the IT Glue logo in the Integrations column.

 

10. You can view the status of linked IT Glue Organizations with Quickpass Customers, navigate to Integrations > select IT Glue. 

 

Note: After a new Quickpass customer has been created you have the choice of using the Customer with Active Directory, Local Accounts, and Office 365.

 

Downloading and Installing the Server Agent on Customer Systems

1. Refer to this KB Article https://support.getquickpass.com/hc/en-us/articles/360035206994-How-to-install-the-Server-Agent-Manual-and-Silent

 

Setting up Office 365

1. If you wish to setup Office 365 follow this KB article https://support.getquickpass.com/hc/en-us/articles/360039678373-How-to-Connect-a-Azure-Office-365-tenant-to-Quickpass-Customer 

 

Then return to this article and proceed to the section titled Import Accounts from Active Directory, Local Accounts, or Office 365 to Quickpass.

 

 

Option 2 - Matching IT Glue Organizations to Existing Quickpass Customers

1. This section assumes you have manually created a customer by clicking the Add New Customer link on the Customers Section of the Dashboard, entered the Customer Name, and clicked the Create button, or imported the Customer Name from another Integration.
   
   
2. Click Integrations  in the left-hand menu and then click the IT Glue logo.
   
3. Click the MATCH CUSTOMERS button on the top-right of the screen. 
   
4. Make your IT Glue filter selections, then click Select.
5. You can use the "Search" box to filter the list or manually scroll through the list of IT Glue Organizations that you would want to match to a Quickpass Customer.
6. Any Customer name that has an exact match for an IT Glue Organization will appear at the top of the screen with an indicator to advise that it was Automatically Matched to a Quickpass Customer.
   
7. If this is the correct IT Glue Organization to Quickpass Customer match, click Save to complete the Match. If this is NOT the correct IT Glue Organization to Quickpass Customer match, click the Trash Can icon to remove the Automatic match and proceed to the next step to manually match it.
   
8. If the Organization Name in IT Glue does not have an exact match to a Quickpass Customer, click the Match with Quickpass Customer box.
   
9. Place the Radio Button in the proper Quickpass Customer you manually created and click Select.  You can search for the Quickpass Customer or scroll through the list/pages.
   
10. When you have matched up all of your IT Glue Organizations to the Quickpass Customers click the Confirm Matches button in the top right.
11. Once you have matched and or selected customers to create, click the Save button in the top right.
    
12. When done you will now see the linked IT Glue organizations with Quickpass Customers on the Customers page.

 

Note: After a new Quickpass customer has been created you have the choice of using the Customer with

 Active Directory, Local Accounts, and Office 365.

 

Downloading and Installing the Server Agent on Customer Systems

1. Refer to this KB Article https://support.getquickpass.com/hc/en-us/articles/360035206994-How-to-install-the-Server-Agent-Manual-and-Silent

 

Setting up Office 365

1. If you wish to setup Office 365 follow this KB article https://support.getquickpass.com/hc/en-us/articles/360039678373-How-to-Connect-a-Azure-Office-365-tenant-to-Quickpass-Customer 

 

Then return to this article and proceed to the section titled Import Accounts from Active Directory, Local Accounts, or Office 365 to Quickpass.

 

 

Import Accounts from Active Directory, Local Accounts, or Office 365 to Quickpass

Importing End User Accounts:

1. Active Directory with O365/Azure
2. Active Directory without O365/Azure
3. Azure/O365 Only
4. Manual Import

Importing Administrator Accounts

1. Automatic Administrator Import
2. Automatic Local Administrator Import

Import Service Accounts

1. Import and Set Rotation

 

Next Steps

Matching Imported Accounts to IT Glue Password Entries

https://support.getquickpass.com/hc/en-us/articles/1500012161922-IT-Glue-Matching-Administrator-Service-and-End-User-Accounts

Manually Resetting Matched Account Passwords in Quickpass

https://support.getquickpass.com/hc/en-us/articles/1500011628061-Manually-Resetting-Matched-Account-Passwords-in-Quickpass 

Rotate Administrator Account Passwords On-Demand

https://support.getquickpass.com/hc/en-us/articles/360039179834-How-to-Rotate-Administrator-Account-Passwords-On-Demand 

Setup Scheduled Password Rotation of Administrator Accounts with IT Glue

https://support.getquickpass.com/hc/en-us/articles/360038042153-How-to-Setup-Scheduled-Password-Rotation-of-Administrator-Accounts-with-IT-Glue 

Setup Scheduled Password Rotation of Service Accounts with IT Glue

https://support.getquickpass.com/hc/en-us/articles/360052090173-How-to-Setup-Scheduled-Password-Rotation-of-Service-Accounts-with-IT-Glue 

Reset Passwords from IT Glue Workflow Trigger

https://support.getquickpass.com/hc/en-us/articles/360057647574-Reset-passwords-from-IT-Glue-using-Workflow-Trigger

 

Frequently Asked Questions:

How does CyberQP match Active Directory and Microsoft 365 accounts to IT Glue password entries?

CyberQP provides three different methods to match Active Directory and Microsoft 365 accounts to IT Glue password entries.

• Automatically match to existing passwords
• Automatically match or failover to create new passwords.
• Manually match to existing passwords

Can CyberQP update or reset end-user, Active Directory, and Microsoft 365 account passwords in IT Glue?

Yes, CyberQP can update end-user account passwords that are accessible in both IT Glue and MyGlue. However, updating end-user account passwords in IT Glue / MyGlue is not mandatory. Password entries updated by CyberQP are accessible through the MyGlue web and mobile app.

 

CyberQP Partners can setup an IT Glue work flow trigger to detect password changes in IT Glue and have them reset in Active Directory or Microsoft 365 using CyberQP.‍

‍

Can CyberQP detect when a password is reset on an Active Directory domain controller, domain-joined workstation, or member server?

Yes, CyberQP uses a password filter on the Active Directory domain controller to detect when passwords are reset so it can update the password entry in IT Glue. However, a domain controller will require one reboot after agent installation.

 

The CyberQP agent password filter will also detect password changes from domain joined workstations and member servers and update the password in IT Glue immediately after.

 

What IT Glue plan is required to integrate with CyberQP? Can I match an IT Glue organization to more than one CyberQP customer?

Since CyberQP leverages the IT Glue API, the Enterprise plan is required to use the integration with CyberQP.

 

You can also match an IT Glue organization to as many customers in CyberQP as required. For the multi-match, all passwords will be created within the same IT Glue organization. 

 

Does CyberQP support IT Glue password folders? Does it also support passwords stored in the IT Glue Vault? 

CyberQP supports updating passwords for password entries in any password folder. However, CyberQP does not support IT Glue Vault passwords. Because we use the IT Glue API, passwords added to the IT Glue Vault cannot be read or updated via the API. Additionally, passwords in IT Glue that have visibility security set to "Only Me" are not supported as this setting will move the password entry to the "Personal" password entries list.