> ## Documentation Index
> Fetch the complete documentation index at: https://kb.mspprocess.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deploying the M365 Password Reset Module through the Microsoft Partner Center

> OverviewThe MSP Process platform can reset M365 users' passwords, reset their MFA methods, and reset their accounts, all from within the MSP Process…

## Overview

The MSP Process platform can reset M365 users' passwords, reset their MFA methods, and reset their accounts, all from within the MSP Process pod/Insight. To do this, an Enterprise Application must be deployed into each M365 tenant. The fastest and most repeatable way to deploy it is to use the Admin Relationships you've already set up through the Microsoft Partner Center. This article walks you through the required steps.

If an end-user can't verify their own identity before a reset, for example because they've lost the phone they use for Microsoft Authenticator, you can verify them through their manager or a designated point of contact using the manager approval method, covered below.

#### Where You Can Perform Identity Management Actions

You can reset an end-user's password, MFA, or account from any of these locations:

1. The Contacts and PSA Tickets pages of [https://app.mspprocess.com](https://app.mspprocess.com)
2. The ConnectWise and HaloPSA pod
3. The Autotask and FreshService Insight
4. The browser extension used by SuperOps/Syncro and Kaseya BMS partners

###

This article provides instructions for setting up and deploying M365 Identity Management.

If M365 Identity Management has already been successfully deployed and you’re looking for guidance on how to use its available features, please see [Self-Service Password Reset (SSPR), MFA Reset, and Unlocking User Accounts](https://kb.mspprocess.com/msp-process/identity-management/password-management/self-service-password-reset-sspr-mfa-reset-and-unlocking-user-accounts.md).

## Prerequisites

1. You must have Admin Relationships set up in the Microsoft Partner Center with each M365 tenant you want to link to MSP Process.
2. Those Admin Relationships must include the **Application Administrator**, **User Administrator**, and **Authentication Administrator** Entra roles.
3. Each of those roles must be assigned to a Security Group.
4. Ideally, use a dedicated group for each role, such as "**GDAP - Application Administrator**", "**GDAP - User Administrator**", and "**GDAP - Authentication Administrator**".
5. The Microsoft user account you'll use during setup must be a member of **all three** Security Groups in M365.

## Linking MSP Process with Microsoft 365

1. Log in to the MSP Process UI.
2. Navigate to **Settings → Integrations → Security Integrations**.
3. Click the **Add new integration** button.

![](https://mintcdn.com/triggr/dXDzJtUmPBaHtkPV/images/msp-process-kb/f1f95f929aa8.webp?fit=max\&auto=format\&n=dXDzJtUmPBaHtkPV\&q=85\&s=d9077cfbfe200af4db644ec734e7e331)

4. Click the **Identity Management** option.

![](https://mintcdn.com/triggr/o9r5jEtjdR2oUtiW/images/msp-process-kb/c3c0cb6aaec9.webp?fit=max\&auto=format\&n=o9r5jEtjdR2oUtiW\&q=85\&s=f073c64416221dffe4f4ebda7ef43e03)

5. Click the **Connect through the Microsoft Partner Center** button.

![](https://mintcdn.com/triggr/-njaXAnAb5AWpJCy/images/msp-process-kb/71fc2773b565.webp?fit=max\&auto=format\&n=-njaXAnAb5AWpJCy\&q=85\&s=0c37eee89bcbbaa6e00d469a171a0b32)

6. In the pop-up window that appears, click the **Link for Redirect URI** button.

![](https://mintcdn.com/triggr/o9r5jEtjdR2oUtiW/images/msp-process-kb/afe551004185.webp?fit=max\&auto=format\&n=o9r5jEtjdR2oUtiW\&q=85\&s=521459ec649ed6900605797ad6230460)

7. Keep the MSP Process window open. In a separate browser tab, log in to [https://portal.azure.com](https://portal.azure.com).

###

## Configuring the Integration for a M365 Cloud Solution Provider (CSP) Environment

**NOTE:** The Admin Relationships you've established with your clients' M365 tenants must have the Application Administrator, User Administrator, and Authentication Administrator roles assigned. If Authentication Administrator is missing, password and account resets will still work, but MFA resets will fail.

1. Log in to your Microsoft Azure portal ([https://portal.azure.com](https://portal.azure.com)).
2. Navigate to **App Registrations**.

![](https://mintcdn.com/triggr/o9r5jEtjdR2oUtiW/images/msp-process-kb/d6eb5e0119cd.webp?fit=max\&auto=format\&n=o9r5jEtjdR2oUtiW\&q=85\&s=8b9d79edb71a9857f70389cb4b9d728b)

3. Add a new App Registration.

![](https://mintcdn.com/triggr/qgn0c5cLkGKqcauq/images/msp-process-kb/9348a4f6f693.webp?fit=max\&auto=format\&n=qgn0c5cLkGKqcauq\&q=85\&s=98530fc556f7702f13e9fffd09201535)

4. Configure it as follows. The URI will vary depending on the ID of your M365 integration.
5. **Name:** MSP Process Identity Management App (GDAP)
6. **Supported Account Types:** Multiple Entra ID tenants; choose the **Allow all tenants** radio button
7. **Redirect URI:** Web; URI: *the URI you just copied from MSP Process*

![](https://mintcdn.com/triggr/qgn0c5cLkGKqcauq/images/msp-process-kb/841f5d286d56.webp?fit=max\&auto=format\&n=qgn0c5cLkGKqcauq\&q=85\&s=aafc076603cacd9447346da056e3e3f8)

5. Within the App Registration you just created, go to **Manage → API Permissions**

6. ![](https://mintcdn.com/triggr/dXDzJtUmPBaHtkPV/images/msp-process-kb/f1c5897004f8.webp?fit=max\&auto=format\&n=dXDzJtUmPBaHtkPV\&q=85\&s=1af63ae25ad6204935dd6679dcb7a620)

7. Assign the app the following permissions.

![](https://mintcdn.com/triggr/dXDzJtUmPBaHtkPV/images/msp-process-kb/f77158014045.webp?fit=max\&auto=format\&n=dXDzJtUmPBaHtkPV\&q=85\&s=6809752a21ee8f69692192c4eec3002d)

7. **NOTE:** For the Partner Center's ***user\_impersonation permission***, there are two identically named permissions. To save yourself a headache, search for the following application ID to bring up the correct one:

8. `**fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd**`

9. Within the App Registration, navigate to **Manage → Certificates & Secrets.**

10. ![](https://mintcdn.com/triggr/o9r5jEtjdR2oUtiW/images/msp-process-kb/d328b1d12463.webp?fit=max\&auto=format\&n=o9r5jEtjdR2oUtiW\&q=85\&s=e75a38d2fcd92650f17c8d515e49b62d)

11. Give your secret a name and we recommend setting the "Expires" to the longest length.

![](https://mintcdn.com/triggr/qgn0c5cLkGKqcauq/images/msp-process-kb/9e4b46aacac2.webp?fit=max\&auto=format\&n=qgn0c5cLkGKqcauq\&q=85\&s=24117981d8d42e7875b7a9eb80f8b78d)

9. Add a new Client Secret.

![](https://mintcdn.com/triggr/dXDzJtUmPBaHtkPV/images/msp-process-kb/f51b5904a36d.webp?fit=max\&auto=format\&n=dXDzJtUmPBaHtkPV\&q=85\&s=6cb02de8963c33b1acbdf4c55469dc69)

10. Copy the Client Secret **Value**, not the ID, because you'll need it in a moment.

![](https://mintcdn.com/triggr/2kaOQdWPjLF3xX8p/images/msp-process-kb/36e2beb7c71d.webp?fit=max\&auto=format\&n=2kaOQdWPjLF3xX8p\&q=85\&s=5bea5d1e2cf40ba5f3d11c2a932721fb)

11. In MSP Process, return to the Identity Management pop-up window you opened earlier and enter the required information:
12. The **Tenant ID** of your M365 CSP tenant
13. The **Application ID** of the app you just registered, found on the Overview page of the App Registration

![](https://mintcdn.com/triggr/qgn0c5cLkGKqcauq/images/msp-process-kb/91de782accd3.webp?fit=max\&auto=format\&n=qgn0c5cLkGKqcauq\&q=85\&s=59402599fc4cafb436559c473b790607)

1. The **Client Secret** from step 10

![](https://mintcdn.com/triggr/-njaXAnAb5AWpJCy/images/msp-process-kb/4e0a354edfeb.webp?fit=max\&auto=format\&n=-njaXAnAb5AWpJCy\&q=85\&s=3cae5f698273979481d51a9b8c872f69)

12. Click **Submit**.
13. When prompted, enter your Microsoft credentials.
14. Once you're returned to the MSP Process UI, wait 1–2 minutes, then click the **Identity Management** card. You'll see your Partner Center-linked tenants.

![](https://mintcdn.com/triggr/o9r5jEtjdR2oUtiW/images/msp-process-kb/b2d70f8531f9.webp?fit=max\&auto=format\&n=o9r5jEtjdR2oUtiW\&q=85\&s=a0356ffc554fffa2cae160366d45379e)

###

To review how to apply the Password and MFA Resets or Unlocking a user's account, please review [Self-Service Password Reset (SSPR), MFA Reset and Unlocking User Accounts.](https://kb.mspprocess.com/msp-process/identity-management/password-management/self-service-password-reset-sspr-mfa-reset-and-unlocking-user-accounts.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.