Authentication

Modified on Mon, Mar 24 at 5:31 PM

For authentication:

This process links an Active Directory (AD) user or a local user with a PSA contact for the client that the agent has already been activated for. It can be done in two ways: (1) by the user themselves or (2) by the Managed Service Provider (MSP) without the user's involvement.

By the user himself

Option 1: Logging the first ticket (recommended)

When the user logs a ticket from an activated agent that has not gone through authentication yet, the App will request the first name, last name & e-mail. If the third one matches a record in the database, the AD User/local user will be associated with it.

If there is no match in the PSA, but the e-mail domain matches the client’s most common one, Invarosoft will create the contact in the PSA.

Note that an e-mail confirmation is needed here. The end-user will receive a ‘Confirmation Required For Ticket’ e-mail, and a reaction is necessary for the contact creation/match to occur.

Option 2: Registering

In this scenario, the end-user right-clicks his IT icon and selects ‘login’

Then selects ‘register’ and provides First name, last name & e-mail

Once the user clicks ‘request password’, we’ll send him the credentials to authenticate himself.

By the MSP without the end-user intervention

As an alternative to avoid end-user intervention for authentication, we’ve developed two ways for the MSP to make the match at their level.

Option 3: Manual Assignment: (step by step: How to Authenticate a User)

Once an agent is activated, it’ll appear on the partner’s agent list in the gray bar, under agents >> agents. (https://portal.invarosoft.net/Client/Agents/0)

The partner needs to find the device and click the option ‘manage’. Once there, a list with each AD /Local User will appear, and clicking ‘assign user’ allows the partner to match that record with an existing PSA contact.

Option 4: AD Harvester

Whenever the client has a single organizational unit on-premise Active Directory, with valid inputs for First Name, Last Name & E-mail, authentication can be automated through an extra piece of software for the server. It is available for our non-trial partners here:

With its instructions to set it up, which are available here:

AD Harvester Deployment Guide

And a video tutorial to do so, here: