Step 1 - Initial Tenant Settings - Setup Screen
Once you have logged in to Quickpass for the First time as the Primary Login, you should configure the initial settings via the Setup Screen.
General Settings:
Step 2 - Setup Technician Login Accounts
Once you have logged in to Quickpass for the first time with your primary login you can create additional login accounts for your technicians if desired. Please refer to this KB article on Login Management for step by step instructions. You can setup these accounts at any time so if this is not required at this point you can skip to Step 2.
Users, Groups and Roles
Step 3 - Create or Import Quickpass Customers
Quickpass is a multi-tenanted system that logically separates MSP clients or customers into what we call Quickpass customers. Quickpass customers can either be manually created one by one or can be imported from any supported Integration.
Now that you are logged into Quickpass the first thing you need to do is either create or import customers. Which method you use is dependent on which Integrations you utilize within your organization.
IT Glue Customers
For IT Glue customers please refer to this KB article that covers the setup of the integration and the importing/matching of customers.
https://support.getquickpass.com/hc/en-us/articles/1500009501742-IT-Glue-Integration-Setup-Guide-New
Hudu Customers
For Hudu customers please refer to this KB article that covers the setup of the integration and the importing/matching of Customers.
https://support.getquickpass.com/hc/en-us/articles/4408662234519-Hudu-Integration-Setup-Guide
Connectwise Manage Customers
For Connectwise Manage customers please refer to this KB Article that covers the setup of the integration and the importing/matching of customers.
Datto Autotask Customers
For Datto Autotask customers please refer to this KB Article that covers the setup of the Integration and the importing/matching of customers.
https://support.getquickpass.com/hc/en-us/articles/7010184664215-Datto-Autotask-PSA-Integration-Setup-Guide
https://support.getquickpass.com/hc/en-us/articles/9074670634007-Match-Datto-Autotask-PSA-Accounts-to-Quickpass-Customers
Halo PSA Customers
For Halo PSA customers, please refer to the these KBs that covers the setup of the Integration and the Import/Matching of Customers
https://support.getquickpass.com/hc/en-us/articles/25342883841047-HaloPSA-Integration-Setup-Guide
Quickpass Tech Vault Customers
If you are not an IT Glue or Hudu customer you will want to proceed by following the instructions in this KB article to create Quickpass customers.
https://support.getquickpass.com/hc/en-us/articles/360035206574-How-to-Create-New-Customer
Step 4 - Setup Customer and Technician Groups
Technician and Customer Groups are used extensively throughout the CyberQP interface.
Technician Groups
Technician Groups are used to determine which of your Team Members, or Co-Managed Technicians have access to which portions of the platform. You can limit access to Customers, passwords, or select which Just in Time Policies are applied to the Technician.
Configuring CyberQP Technician Groups
Customer Groups
Customer Groups help you further define which of your Technician Groups have access to specific Customers. This is especially important when setting up Co-Managed Technicians. You can limit which Customers appear on the Dashboard for the Technician Groups you have defined. Customer Groups are also used for Just in Time Policies - if you have specific requirements for security groups, or Roles at a customer, you can now define this directly in the Just in Time Policy configuration.
Configuring CyberQP Customer Groups
Step 5 - Setup Automatic Import Options and Policies
Setting up the Import Options and Policies will reduce your administrative overhead. Configuring these allows you to configure a Policy that will apply to your Customers that you select. Import Policies are split into 2 sections per account type:
-
Import Options - what actions are taken when an account is imported (create one per Account Type)
- Account Type and Source - how do you want to import accounts for Administrator or End User accounts per Source (create one per Source and Account Type - 5 combinations are available)
Active Directory Import Policy
Microsoft 365 (M365) Import Policy
Local Account Import Policy
Step 6 - Install Agent or link Office 365 Tenant
Prepare Threat Protection for Installation
Generic KB:
Server Agent is getting blocked by Threat Protection – CyberQP
ThreatLocker:
ThreatLocker Compatibility with Quickpass Server Agent – CyberQP
Active Directory / Local Accounts
If you are setting up a Quickpass customer that has On-Premise Active Directory on its own or a hybrid setup using AD Connect with On-Premise Active Directory and Office 365 you will need to install the agent on your customers Active Directory server. Similarly, if you have local accounts you wish to import into Quickpass. To do so follow these KB articles.
Install Agent
Scripting and Manual Installation of Agent
https://support.getquickpass.com/hc/en-us/articles/37046354052759
Agent Deployment:
Office 365
If you are setting up a Quickpass customers with Office 365 you will need to follow this KB article to link a Quickpass customer with an Office 365 tenant.
Enterprise App Deployment:
Step 7 - Setup Self-Serve
Once you either have the Active Directory server agent installed or you have linked a Quickpass customer to an Office 365 tenant account you can begin importing users to be used for self-serve password resets. If you don't plan on using self-serve you can skip to Step 5 for password rotation.
Important: To ensure no emails from Quickpass get marked as spam add the domain getquickpass.com and quickpassnotifications.com to your customer spam filter white lists. Although Quickpass has setup necessary SPF and DKIM records for its automated emails there is still a chance some spam filters may identity our welcome emails as bulk or spam. Adding our domain to customer spam filter white lists ensures none of our emails gets marked as spam.
Import End-User Accounts
Follow these KB article on how to import users into Quickpass to be used for Self-Serve password reset.
Automatic Import
- Automatic Import of Active Directory End Users (No Office 365/Azure) - https://support.getquickpass.com/hc/en-us/articles/4403746488471-Automatic-Import-of-Active-Directory-End-User-Accounts-Not-Linked-to-Office-365-
- Automatic Import of Active Directory End Users (With Office 365/Azure) - https://support.getquickpass.com/hc/en-us/articles/4403759906327-Automatic-Import-of-Active-Directory-End-User-Accounts-Linked-to-Office-365-
- Automatic Import of O365/Azure only End Users (licensed accounts)
https://support.getquickpass.com/hc/en-us/articles/6283664620567-Automatic-Import-of-Azure-O365-Only-End-User-Accounts
Manual Import
Adding End Users:
On-board Mobile App Users
On-board Web App Users (If needed)
Send User Guides to End Users (If needed)
Mobile App: End user on-board User Guide
Mobile App: How to reset passwords and unlock your account
Web App: End user on-board User Guide
Web App: How to reset passwords and unlock your account
Self Serve Status and Notifications:
Step 8 - Setup Password Rotation
For password rotation follow this KB article on how to import users into Quickpass so they can be setup for password rotation.
-
NOTE: As of August 1st, we recommend using Automatic Import Policies to manage the import of accounts.
Active Directory
M365/Azure/Entra
Local Admin
Scheduled Password Rotation
Automatic Import of Active Directory and/or Office 365/Azure Administrator Accounts
Automatic Import of Local Machine Administrator Accounts
Services
Quickpass Tech Vault
Setting Rotation Schedules:
Adding Service Accounts and Matching:
On-Demand Password Rotation
External Password Storage
Quickpass Tech Vault
Service Account Password Rotation
External Password Storage
Quickpass Tech Vault
Step 9 - Just in Time Setup
Just in Time accounts allows you to transition away from Shared accounts for Technicians. No longer does everyone on your team need to have access to a single "breakglass" account to manage your Customers. This will give you more granular admin access (specifying which Permissions the technician has access to), more accurate auditing (each technician has their own account), and reduces the attack surface (each account is disabled and permissions removed when not in use)
How To - Turn On Just-in-Time Privileged Accounts Feature (QGuard Pro)
Answering Just-In-Time (JIT) FAQ
Step 10 - Customer Identity Verification
Comments
0 comments
Please sign in to leave a comment.