CyberQP - QTech Browser Extension Guide

Overview

The CyberQP - QTech Browser Extension allows MSP partners to quickly access, autofill, and manage JIT credentials without leaving their browser. It is designed to save time, reduce copy-paste errors, and improve security by integrating Just-In-Time (JIT) account management directly into the browser experience.

Compatibility

The extension is available on the Chrome Web Store or Edge Addons and works with all major Chromium-based browsers, including Google Chrome and Microsoft Edge.

Note: The extension is not supported on Firefox or Safari at this time.

Installation

1. Open the CyberQP - QTech extension page in the Chrome Web Store or from Edge Addons.

2. Click Add to Chrome.

3. In the confirmation pop-up, click Add Extension/GET.

4. Pin the extension to your browser toolbar for easy access:

   • Click the Extensions puzzle-piece icon.

   • Find CyberQP - QTech and click the Pin icon.

5. To use Incognito launch and automatic login, your browser requires the extension to be allowed in private browsing:

   1. Go to the extension’s browser settings.

   2. Enable Allow in Incognito/Private mode.

Logging In

The extension supports the same login methods as the CyberQP dashboard app:

• Username & Password with MFA
  Enter your CyberQP username and password. Complete MFA when prompted.

• Single Sign-On (SSO)
  Log in using your SAML SSO provider.

  
  When you first enable this, you may be prompted to accept the sign in via the API that links your account to the Chrome Extension
  

  Click Accept

High-Level Feature Overview

After logging in, you can:

• Search and View JIT Accounts
  Filter by customer, search by username or display name, and see account details (status, expiration, policy, etc.).

• Activate JIT Accounts
  Activate, enable, disable, increase time and delete JIT accounts directly from the extension.

• Autofill Credentials
  Inject credentials and TOTP codes directly into Microsoft login pages, or launch a Microsoft portal and autofill credentials automatically.

Search and View JIT Accounts

The Search & View JIT Accounts allows technicians to quickly find and access the accounts they need across all customers without switching to the CyberQP web app.

Accessing the JIT Account List

1. Click the CyberQP - QTech extension icon in your browser toolbar.

2. Log in (if not already logged in).

3. The JIT Accounts list will display:

   • Enabled accounts first

   • Sorted alphabetically by customer name and then by username

Filtering by Customer

You can narrow down the list to a single customer:

1. Click the Customer Filter dropdown at the top of the extension.

2. Select the customer you want to view.

3. Only JIT accounts for the selected customer will be displayed.

   Clear customer selection to return to the full list.

Searching for JIT Accounts

Use the Search bar to quickly find accounts:

• Search by Display Name - Find accounts by the name shown to technicians.

• Search by Username - Locate accounts by their username.

The list will update in real time as you type.

Viewing JIT Account Details

Click on any JIT account to open the Account Details view.
You will see the following information:

• Customer Name

• Display Name

• Account Type (M365, Local, AD)

• Status (Enabled or Disabled)

• Username

• Password (hidden until revealed)

• Expiration

• Reason

• Policy Name

From this view, you can also:

• Copy Username or Password with one click

• Copy OTP code (if available)

• Perform actions such as Enable, Disable or Activate (depending on permissions and account state)

Activate JIT Accounts

Technicians can activate Just-In-Time (JIT) accounts directly from the CyberQP - QTech browser extension.

1. Open the CyberQP - QTech extension.

2. Click the "+" add account to open Add JIT Account menu.

3. Select the Customer you are creating the JIT account for.
   

4. Once selected, select JIT account type.  Only JIT account types that the Customer or Technician has access to will be presented.
    

   All Sources	Limited Source or Technician Access

5. Select Policy, Duration, provide reason and click Activate.

Autofill Credentials

The Autofill Credentials allows technicians to inject usernames, passwords, and TOTP codes directly into Microsoft login pages eliminating the need to copy and paste. This is applicable to M365 JIT accounts only.

Autofilling on Microsoft Login Pages

When you are on a supported Microsoft login page, the CyberQP - QTech extension will automatically detect it.

1. Click the CyberQP - QTech extension icon.

2. Locate and select an enabled M365 JIT account.

3. Click Autofill.

OR

1. Click on Microsoft login credential fields.

2. Locate and select an enabled M365 JIT account.

3. Click Fill.

The extension will:

• Fill the username field.

• Fill the password field.

• Submit the form automatically.

• Enter the TOTP code (if available) on the MFA screen.

Launching a Microsoft Portal with Autofill

If you are not currently on a Microsoft login page, you will see a Launch button instead of Autofill.

1. Click Launch.

2. Choose one of the available Microsoft portals (e.g., Entra ID, Intune, Exchange) from the dropdown list.

3. A new incognito tab will open and the extension will autofill the credentials once the login page loads.

Why Incognito Mode?

Opening portals in Incognito mode ensures a clean, isolated session so the JIT account can be accessed without conflicting with any existing logins.

This makes the login process faster and reduces manual steps like signing out of existing accounts or switching profiles.

Notes & Requirements

• Autofill is only available for enabled M365 JIT accounts.

• Local or AD JIT accounts will not show the Autofill button (but you can still copy credentials manually).

• By default, all JIT Launch links open in Incognito mode.

• You can change this in the extension Settings under Incognito settings (Normal vs. Incognito).

• To use Incognito launch and automatic login, your browser requires the extension to be allowed in private browsing:

  • Go to the extension’s browser settings.

  • Enable Allow in Incognito/Private mode.

Control How Long You Stay Signed In

You can control how long you stay signed in before the system automatically logs you out for security purposes.

To manage your session timeout:

1. Open the Settings page by clicking your profile icon in the top-right corner and selecting Settings.

2. In the Security section, locate the Logout after option.

3. Use the dropdown menu to choose your preferred session length:

   • 15 mins

   • 1 hour

   • 4 hours

   • 8 hours

   • 10 hours (default)

4. Your selection will take effect immediately.