Integrate your CSP Direct Agreement

Transcription

1 Overview: - The information needed to integrate your CSP Direct tenant is contained in this PDF Guide. You will be asked to create and access various authentication keys and which you need to do in the Microsoft Partner Centre and Azure Portal for which you will be required to have the appropriate permissions. Important - CSP template file. As you go through this process, capture the inputted information, along with the screen prints, in the CSP template file (click to open) This completed document will be required by Cloudmore support if you have any problems. Cloudmore 1 of 26 v

2 Follow these steps instructions below to integrate your CSP Direct Tenant. 1. Activate the Microsoft CSP Service Add-on. 2. Add the 0365 CSP direct service from your marketplace 3. Find your partner tenant ID 4. Create your partner centre application ID 5. Create a user for Cloudmore SDK 6. Create your graph application 7. Set your permissions (Azure graph API) 8. Create your graph application secret 9. Find your graph application ID URL 10. Set your permissions (Partner centre native App) 11. Enter the information in Cloudmore 12. Run the PowerShell scripts You must use a Global Admin account when completing each step in this guide. Do not enter the information in the Cloudmore platform until you have completed step 9. Save the information in the CSP template file until it is needed. Cloudmore 2 of 26 v

3 Step 1: Activate the Microsoft CSP Service Add-on. Log in to Cloudmore. Navigate to your reseller menu, then click on reseller and select add-on s. Cloudmore 3 of 26 v

4 Tick to select Pre-Integrated Services Microsoft CSP The cost will show in your local currency and will be charged at this rate after your free trial expires. Click update. Cloudmore 4 of 26 v

5 Integrate your CSP Direct Agreement Step 2: Add the 0365 CSP direct service from your marketplace Navigate to your reseller menu, then click on marketplace. Locate the Microsoft 0365 CSP direct service. Click on service to add and follow on screen instructions. Cloudmore 5 of 26 v

6 Step 3: Find your partner tenant ID With your Global Admin Account - Login to your partner center, Navigate to account settings, then select organizational profile. xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx Copy the Microsoft ID (Partner Tenant ID) to the CSP template file. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 6 of 26 v

7 Integrate your CSP Direct Agreement Step 4(a): Create your partner centre application ID Navigate to account settings, then select app management. Click add new native app. Cloudmore 7 of 26 v

8 Step 4(b): Create your partner centre application ID Copy the app name to the CSP template file. xxxxxxx-xxxx-xxxx-xxxx-xxxxxx Copy the app ID to the CSP template file. Screen print this page and save in the CSP template file under the correct heading. Cloudmore 8 of 26 v

9 Step 5(a): Create a user for Cloudmore SDK Navigate to account settings. Select user management. Click add new user. Cloudmore 9 of 26 v

10 Step 5(b): Create a user for Cloudmore SDK Name the account Select admin agent in the Click add. A temporary Copy the PC user name Cloudmore SDK account. Assists your customers as password will be displayed. ( address) and the new Note: Do not use an existing Select not an admin in the Login immediately using this PC password to the CSP account. Manages your company account and reset the template file. Log out of as. password. the Cloudmore SDK account. Cloudmore 10 of 26 v

11 Step 6(a): Create your graph application Using your Global Admin Account Login to your azure portal Check that you are have not auto-logged in with the SDK account. Navigate to azure active directory. Navigate to app registrations. Cloudmore 11 of 26 v

12 Step 6(b): Create your graph application Integrate your CSP Direct Agreement Click + add. Enter the name azure graph API production. Select web app / API under Application type. Enter under Sign-On URL. You need to click outside of the box to make the Create button turn blue. Then you can click on create. Once the app is created and you see a successful message in the top right corner. Click on the app you just created. Cloudmore 12 of 26 v

13 Step 7: Set your permissions (Azure graph API) Copy the application ID to the CSP template file. Click required permissions. Cloudmore 13 of 26 v

14 Click + add Check the delegated Screen print the page and save Click windows azure active Select an API, select window permission (access azure in the CSP template file under directory. Set the permissions azure service management service management ), click the correct heading. as highlighted below. Click API. select > done to save the API. save. Cloudmore 14 of 26 v

15 Step 7(b): Set your permissions (Azure graph API) Tick the 4 permissions boxes that are marked. Click grant permissions when all permissions are set. Ensure the number of permissions allocated is showing 1 and 3. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 15 of 26 v

16 Step 8: Create your graph application secret Click Keys. Enter a description, for instance graph API Key. Select never expires under Expires. Then click save. A value will be displayed. Copy the value immediately (Graph Application Secret) to the CSP template file. xxxxxxx-xxxx-xxxx-xxxx-xxxxxx You won t be able to view it again. Cloudmore 16 of 26 v

17 Step 9: Find your graph application ID URI Click properties. Under properties set multi-tenanted to yes. Copy the app ID URI to the template document. Screen print the page and save in the CSP template file under the correct heading. Click save Cloudmore 17 of 26 v

18 Step 10(a): Set your permissions (Partner Centre Native App) Navigate to app registrations. Then select partner center native app. Cloudmore 18 of 26 v

19 Step 10(b): Set your permissions (Partner Centre Native App) Click required permissions Click windows azure active directory. Tick the 3 permissions boxes that are checked. Click grant permissions when all permissions are set. make sure the number of permissions allocated is 3. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 19 of 26 v

20 Step 10(c): Set your permissions (Partner Centre Native App) Click + add. Under select an API, search for azure graph API production (that was created in step 5), click select. Add the permission called access azure graph API, click select and then done to save the API. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 20 of 26 v

21 Step 11(a): Enter the details into Cloudmore Log in to Cloudmore. Navigate to your reseller menu. Click on my services, Microsoft 0365 CSP direct. Click on authentication keys. Cloudmore 21 of 26 v

22 Integrate your CSP Direct Agreement Step 11(b): Enter the details into Cloudmore Copy the keys from the template document and paste into Cloudmore. Cloudmore 22 of 26 v

23 Step 12(a): Run the PowerShell Scripts Requirements You need to use a 64-bit version of Windows and any of the following are supported: Windows 10 Windows 8.1 or Windows 8 Windows 2012 R2 or Windows Server 2012 Windows 7 Service Pack 1 (SP1) Windows Server 2008 R2 SP1 (a) (b) Install Microsoft Online Services Sign-in Assistant (64-bit version). From download/details.aspx?id=41950 Then follow the on-screen installation instructions. Run the built-in windows powershell module (search powershell in windows start menu) and remember to right-click the widows powershell shortcut and run as administrator. This will start a Windows PowerShell window with Azure. Cloudmore 23 of 26 v

24 Integrate your CSP Direct Agreement (c) Assign credentials Type the command: Install-Module MSOnline If prompted to install the NuGet provider, type Y and press ENTER. If prompted to install the module from PSGallery, type Y and press ENTER. In the powershell window type: $UserCredential = Get-Credential And then click enter. This will bring a credentials prompt. Enter the global admin credentials you used to login to the Azure portal. Once done you have saved your login credentials in the variable $UserCredentials, we will use this in next step to login. (e) Connect to Microsoft Azure Run the following command to use your credentials and login to Microsoft with PowerShell: Connect-MsolService -Credential $UserCredential If no error was received, that means you connected successful. The window should now look like this: Cloudmore 24 of 26 v

25 (f) Save your "Azure Graph App" ID to variable. Run the following command to save your "Azure Graph App ID to a PowerShell variable: $AppID = <enter-your-azure Graph App-id-here> (g) Run the following command one by one. $group = Get-MsolGroup? {$_.DisplayName -eq 'AdminAgents'} $principal = Get-MsolServicePrincipal? {$_.AppPrincipalId -eq $AppID} Add-MsolGroupMember -GroupObjectId $group.objectid -GroupMemberType ServicePrincipal -GroupMemberObjectId $principal.objectid (h) Finished Now you are done. Close the PowerShell window to disconnect from Microsoft. Cloudmore 25 of 26 v

26 Completing your setup 1. Link your CSP customer tenants - Enables data processing in Cloudmore. 2. Test CSP setup - Do this after you have linked your customer tenants. Click the links to access the relevant setup guides. END. Cloudmore 26 of 26 v