Ask AI
All Categories
Getting Started
MSP Onboarding Guide

MSP Onboarding Guide

This guide walks you through configuring your Managed Service Provider (MSP) environment in the Evo Portal. After completing these steps, your MSP will be ready to administer Evo Security services for customers.

Last updated on September 9, 2025

Initial Evo Setup

This guide walks you through configuring your Managed Service Provider (MSP) environment in the Evo Portal. After completing these steps, you will have your MSP users into the Evo Portal so that they can administer Evo and your MSP environment will be setup so that you can test or deploy Evo products to your MSP’s internal environment.

The setup process includes:

  1. Portal access
  1. Directory synchronization
  1. User and license configuration
  1. Roles and permission setup
  1. (Optional) Evo Agent installation

Step 1: Access the Evo Portal

  1. Open your Evo welcome email and complete the password reset workflow to create your Super Admin (”break glass”) account.
      • We recommend using a dedicated email address such as a Shared Mailbox or Distribution Group (not a personal account) for the Super Admin account. This account will only be used during the initial setup to invite additional users via personal, dedicated addresses. Once that is done, we recommend storing the credentials for the Super Admin account securely and not using it outside of a need for emergency access.
  1. Sign in to the Evo Partner Portal with your Super Admin credentials.
    1. Your Partner Portal URL was assigned during account provisioning and will be something like yourmsp.evosecurity.com.
  1. Select your MSP tenant from the drop-down menu at the top of the left navigation bar.

Step 2: Connect Your MSP Directory

Evo must be connected to your MSP’s directory to synchronize users. Initially, you may only want to sync users who will administer Evo (e.g., MSP technicians.)

Additional users can be synced later, which you will want to do in order to use Evo services like MFA for your MSP. You can use groups to easily define and modify which users should be synced from your directory into Evo.

  1. With your MSP tenant picked at the top of the left nav bar, go to Identities > Directories.
  1. Keep the default Evo Cloud Directory as a Service entry.
      • This directory stores your Super Admin/break glass account and should remain intact even if you use a third-party directory as your primary directory service.
  1. Follow the setup guide for your chosen directory type, then return to this page:

Step 3: Configure Users and Assign Licenses

  1. In the upper left corner, navigate to Evo Admin > Licensing & Billing.
  1. Scroll down and Expand the > next to your Tenant in the Tenant License Settings section.
  1. Allocate licenses to your tenant below for technicians or end users.

Configure Users for Access to Evo Partner Portal

Note: Users need to have the “Convert to Admin” step below completed before they will be able to log into the Evo Partner Portal. Without that, they are “regular users” who can be setup to use things like MFA or Helpdesk Verification but they cannot login to administer Evo itself.

  1. Ensure that users are syncing from your directory as expected under Identities > Users under your Tenant.
  1. Click on the username to open their full profile.
  1. To grant portal management privileges, click Convert to Admin in the upper right of the screen.
  1. Configure account options by toggling settings from red to green:
      • ZenDesk Link - This creates a user in Evo’s Zendesk for opening Helpdesk tickets
      • MFA Status
      • User Status
      • License type
  1. Click Welcome Email (bottom left) to send the setup email to the user.

Repeat Setup 4 for all users that will administer Evo into the Portal - including yourself!

Step 4: Configure Roles and Permissions

  1. Navigate to Global > Evo Admin > Permissions.
  1. On Roles Tab, Create a New role (e.g., “Full Access Admin”).
  1. Select users or group and required permissions (use Select All for full access).
  1. For users with limited responsibilities, create separate roles with restricted permissions (e.g., exclude billing or password management).

Once complete, you may log out of the Super Admin account and activate your own account using the Welcome Email.

At this point, you are ready to provision customers under Evo Admin > Tenants > Add New Tenant and follow the setup wizard.

Step 5: Evo Agent Installation (Optional)

If you plan to use or test Evo in your MSP tenant for MFA or End User Elevation, install the Evo Agent on your workstations.

Create an Access Token

  1. In your tenant, go to End Points > Access Token.
  1. Click New Token.
  1. Enter a name and select:
      • Credential Provider
      • Directory
      • Expiration period (1, 3, 5, or up to 30 years)
  1. Save the token.
      • Important: Copy the token details (Access Key and Secret Key) before closing. You can save it into your password or documentation manager. You will not be able to retrieve the Secret Key later.

Download the Evo Agent

  1. Navigate to Evo Admin > Downloads.
  1. Select OS, version, and architecture.
  1. Click Get Software and download the installer.

Install the Evo Agent

  1. Run the installer on the target computer.
      • Pause or set appropriate exceptions in any endpoint protection software (e.g., ThreatLocker) if required.
  1. Accept default installation options.
  1. When prompted, enter:
      • Environment URL
      • Evo Directory Domain
      • Access Key
      • Secret Key
  1. Enable desired features and complete installation.

You can also deploy the Agent via your RMM tool: Deployment KB

Next Steps

Your MSP environment is now onboarded to Evo Security and ready to manage customer tenants.

Please refer back to the main page of the Knowledge base to setup and configure MFA, Tech Elevation, End User Elevation or Helpdesk Verification

 
Did this answer your question?
😞
😐
🤩
Evo Prerequisites & Supported Operating Systems Evo Authenticator Mobile App 5.1.x (iOS and Android)