Skip to main content

Context:

MSP Process allows you to reset a user’s M365 password, right from within your PSA, or from the Contacts/Tickets pages in the MSP Process UI. Using the feature is exceedingly easy, but there are a few quick setup steps that need to be taken before the feature can be used.

Linking MSP Process to your M365 Environments

You’ll need to deploy our Enterprise Application to your customer’s M365 environments before MSP Process can change an end-user’s password.

Creating the App Registration

  1. Login to your Microsoft Azure portal (https://portal.azure.com)
  2. Navigate to App Registrations
  3. Add a new App Registration, and configure it as follows (note that the URL will change, depending on the ID of your M365 integration):
  4. Name: MSP Process: M365 Password Reset
  5. Supported Account Types: Accounts in this organizational directory only (Default Directory Only- Single Tenant)
  6. Redirect URI: This is an optional field; please leave it blank
  8. Click Register when you’re ready.

Assigning Permissions

  1. Within the App Registration that you just registered, navigate to the Manage -> API permissions blade
  2. Choose Microsoft Graph API
  3. Choose Application permissions
  4. Configure the App Registration to have the following permissions (all are Application-level permissions):
  5. Application.Read.All
  6. Group.Read.All
  7. GroupMember.Read.All
  8. User-PasswordProfile.ReadWrite.All
  9. User.ReadWrite.All
  10. UserAuthenticationMethod.ReadWrite.All
  11. Once you’ve added those permissions, it should look like this:
  13. Click the Grand admin consent for <your domain> button

Creating a Client Secret

  1. Within the App Registration, navigate to the Manage -> Certificates & Secrets blade
  2. Click the + New client secret button
  3. Specify a name for this client secret, and set the expiration date to be 730 days (24 months)
  4. Click the Add button
  5. Copy the Value of this new client secret - you’ll need it in the next section

Configuring MSP Process to Communicate with the App Registration

  1. Login to MSP Process (https://app.mspprocess.com) as an Admin-level user
  2. Navigate to the Settings -> Integrations -> Security Integrations page
  3. Click on the Add New Integration button
  5. Click on the M365 Identity Management button
  7. Fill in the required fields:
  9. Click the Submit button to finish setting everything up

Using the Password Reset Feature

The Password Reset feature is available in the MSP Process UI, from either the Contacts page or the Tickets page. It’s also available in the ConnectWise and HaloPSA “pods”, and will shortly be available in the Autotask Insight. In order to change a user’s M365 password, they must first be verified using the End-User Verification feature. If they haven’t yet been verified, we’ll show you this handy message when you hover over the Password Reset button: Once you’ve verified the user’s identity though, you can then invoke the Password Reset feature: You’ll then be asked to confirm that you want to reset their password:

What Is Your End-User’s Experience?

We send the user their new password through our Secure Data Sharing feature - ensuring a branded and consistent experience. The link to their new password is sent as an SMS message, to the phone number they have registered in Microsoft as an Authentication Method: