Background

This article provides a walkthrough on configuring the IT Glue integration in CyberQP, importing IT Glue organizations as new CyberQP customers, and matching existing CyberQP customers to IT Glue organizations.

Table of Contents

• Pre-requisites
• Enable IT Glue Integration
• IT Glue Integration Options
• Import Accounts from Active Directory, Local Accounts, or Office 365
• Next Steps
• Frequently Asked Questions

Pre-requisites

• IT Glue Enterprise plan (required for IT Glue API access)
• IT Glue Password Vault: Passwords stored in the IT Glue host-proof Vault are not supported. Neither IT Glue nor CyberQP can read or update passwords for matched accounts stored in the Vault.
• IT Glue Password Security set to "Only Me": Passwords with visibility set to "Only Me" are not supported. This setting moves the password entry to the "Personal" password entries list.

Disclaimer: Do you have an empty IT Glue account?

As a new or empty IT Glue tenant, choose one of the following setup paths before proceeding.

Prioritize General Passwords
Integrate CyberQP first. CyberQP will create general passwords since there are no existing configurations or devices in IT Glue. General passwords provide stand-alone access management in IT Glue.

Note that embedded passwords are the only type that appear directly in the right-hand panel of a configuration or device with the "copy password" feature in IT Glue. General passwords can only be linked as a "related" item. New IT Glue tenants may be unaware of the security differences between embedded and general passwords.

Prioritize Embedded Passwords
Connect your PSA and/or RMM integration first, build out your organizations and configurations or devices, and then connect CyberQP. CyberQP will attempt to match existing configurations and create embedded passwords. Embedded passwords inherit access management settings from the parent configuration or contact. Refer to IT Glue's documentation for details on this inheritance-based security model.

Enable IT Glue Integration

1. As an IT Glue Administrator, log in to IT Glue and navigate to Account > Settings.

2. Click the API Keys tab.

   

   it glue account settings api keys tab

3. In the Custom API Keys section, click + to create a new custom API key.

4. Enter a name for the API key (e.g., CyberQP-Integration), check the Password Access checkbox, and click Generate API Key.

   

   custom api key form with password access checkbox enabled

5. Copy the newly generated API key.
   NOTE: If you use IT Glue IP Access Control, add the required CyberQP IP addresses before proceeding. Refer to the Firewall Port Exceptions and IP Whitelisting article for the required IP addresses.

6. Log in to the CyberQP admin dashboard at https://admin.getquickpass.com or https://eu-admin.getquickpass.com using your CyberQP Administrator account.

   

   cyberqp admin login screen

7. Click Integrations in the left-hand menu.

   

   integrations menu in cyberqp left-hand navigation

8. Click the IT Glue logo on the Integrations page.

9. Paste the API key into the field and select the Cloud Zone matching your IT Glue account region: US Cloud (United States or Oceania), AU Cloud (Australia or New Zealand using the IT Glue AU region), or EU Cloud (European Union).

   

   it glue api key entry with cloud zone selection

10. Click Connect. The IT Glue logo displays with a green indicator in the top-left corner.

    

    it glue integration connected with green indicator

With the IT Glue API connected, proceed to import IT Glue organizations as new CyberQP customers or match existing CyberQP customers to IT Glue organizations.

Option 1 - Import IT Glue Organizations as New CyberQP Customers

Importing IT Glue organizations

1. Click Integrations in the left-hand menu.

   

   integrations menu in cyberqp left-hand navigation

2. Click the IT Glue logo, then click Match Customers in the top-right corner.

   

   it glue integration page with match customers button

3. Select your IT Glue organization filter options, then click Select.

   

   it glue organization filter options

4. On the Match Customers page, check the checkbox next to each IT Glue organization to import, then click Save in the top-right corner.

   

   match customers page with organization checkboxes

5. If CyberQP customers already exist but have not yet been matched to IT Glue, automatic matches appear with a 3-star icon. These link automatically when you click Save.

   

   automatically matched organizations shown with star indicator

6. To filter the view to specific companies, click the Match Status menu.

   

   match status filter menu options

7. When in a filtered view (Unmatched, Suggested Matches, or Matched), click Confirm Matches to proceed.

   

   confirm matches button in filtered view

8. Confirm Matches returns you to the "All" view to review selections before clicking Save.

   

   all organizations view with selections ready to save

9. Once imported, organizations appear on the Customers page with the IT Glue logo in the Integrations column.

   

   customers page showing it glue logo in integrations column

10. To view linked IT Glue organization status, navigate to Integrations and click the IT Glue logo.

    

    it glue integration showing linked organization status

NOTE: After creating a new CyberQP customer, configure the customer with Active Directory, Local Accounts, or Office 365.

Downloading and installing the server agent on customer systems

Refer to the Server Agent Installation (Manual and Silent) article.

Setting up Office 365

Refer to the Connect an Office 365 Tenant to a CyberQP Customer article, then return here and proceed to Import Accounts from Active Directory, Local Accounts, or Office 365.

Option 2 - Matching IT Glue Organizations to Existing CyberQP Customers

NOTE: This section assumes a CyberQP customer already exists, created manually via Add New Customer on the Customers page or imported from another integration.

1. Click Integrations in the left-hand menu, then click the IT Glue logo.

   

   integrations page showing it glue logo

2. Click Match Customers in the top-right corner.

   

   it glue integration page with match customers button

3. Select your IT Glue filter options, then click Select.

   

   it glue organization filter selections

4. Use the Search box to find IT Glue organizations, or scroll through the list.

5. Organizations with an exact name match to a CyberQP customer appear at the top with an indicator showing they were automatically matched.

   

   automatically matched organization shown at top of list

6. If the automatic match is correct, click Save. If it is not correct, click the Trash icon to remove it, then proceed to the next step.

   

   trash can icon to remove an automatic match

7. For organizations without an exact name match, click the Match with CyberQP Customer box.

   

   match with cyberqp customer selection box

8. Select the radio button next to the correct CyberQP customer, then click Select. Use the search field or scroll to find the customer.

   

   cyberqp customer selection list with radio buttons

9. Once all IT Glue organizations are matched, click Confirm Matches in the top-right corner.

10. Click Save in the top-right corner.

    

    save button in the top-right corner

The linked IT Glue organizations now appear on the Customers page.

customers page with linked it glue organizations

NOTE: After creating a new CyberQP customer, configure the customer with Active Directory, Local Accounts, or Office 365.

Downloading and installing the server agent on customer systems

Refer to the Server Agent Installation (Manual and Silent) article.

Setting up Office 365

Refer to the Connect an Office 365 Tenant to a CyberQP Customer article, then return here and proceed to Import Accounts from Active Directory, Local Accounts, or Office 365.

Import Accounts from Active Directory, Local Accounts, or Office 365

Importing end user accounts

• Active Directory with Office 365 or Entra ID
• Active Directory without Office 365 or Entra ID
• Entra ID or Office 365 only
• Manual import

Importing administrator accounts

• Automatic administrator import
• Automatic local administrator import

Importing service accounts

• Import and set rotation

Next Steps

Matching imported accounts to IT Glue password entries

IT Glue - Matching Administrator, Service, and End User Accounts

Manually resetting matched account passwords in CyberQP

Manually Resetting Matched Account Passwords in CyberQP

Rotating administrator account passwords on-demand

How to Rotate Administrator Account Passwords On-Demand

Setting up scheduled password rotation with IT Glue - administrator accounts

Setup Scheduled Password Rotation - Administrator Accounts with IT Glue

Setting up scheduled password rotation with IT Glue - service accounts

Setup Scheduled Password Rotation - Service Accounts with IT Glue

Resetting passwords from IT Glue workflow trigger

Reset Passwords from IT Glue Using Workflow Trigger

Frequently Asked Questions

How does CyberQP match Active Directory and Microsoft 365 accounts to IT Glue password entries?

CyberQP provides three methods to match Active Directory and Microsoft 365 accounts to IT Glue password entries:

• Automatically match to existing passwords
• Automatically match, or fall back to creating new passwords
• Manually match to existing passwords

Can CyberQP update or reset end user, Active Directory, and Microsoft 365 account passwords in IT Glue?

Yes. CyberQP can update end user account passwords accessible in both IT Glue and MyGlue. Updating end user passwords in IT Glue or MyGlue is not mandatory. Password entries updated by CyberQP are accessible via the MyGlue web and mobile app.

CyberQP partners can configure an IT Glue workflow trigger to detect password changes in IT Glue and push resets to Active Directory or Microsoft 365 via CyberQP.

Can CyberQP detect when a password is reset on an Active Directory domain controller, domain-joined workstation, or member server?

Yes. CyberQP uses a password filter on the Active Directory domain controller to detect password resets and update the IT Glue password entry. A domain controller requires one reboot after agent installation.

The CyberQP agent password filter also detects password changes from domain-joined workstations and member servers and updates the IT Glue entry immediately.

What IT Glue plan is required? Can I match an IT Glue organization to more than one CyberQP customer?

The IT Glue Enterprise plan is required, as CyberQP uses the IT Glue API which is only available on that plan.

An IT Glue organization can be matched to multiple CyberQP customers. All passwords are created within the same IT Glue organization for multi-match configurations.

Does CyberQP support IT Glue password folders? What about IT Glue Vault passwords?

CyberQP supports updating passwords in any IT Glue password folder. IT Glue Vault passwords are not supported — the IT Glue API cannot read or update Vault entries. Passwords with visibility set to "Only Me" are also not supported, as that setting moves the entry to the "Personal" list.

end of article