Skip Navigation LinksALVAO 11.2Admin guideSaaS initial setup Skip Navigation Links.


SaaS initial setup

First registration + user account setup

  1. Register your Microsoft Entra account at your Alvao instance URL: https://yourcompany.onalvao.com/
    Your account will be automatically:
    • created as a user in Alvao and
    • added to the system group Administrators
  2. Set up necessary permissions for your account (assign to groups)
    • You can do this from the Users or Groups in the Administration part in ALVAO WebApp
      • Group Requesters - to be able to create tickets in the Service Catalog
      • Group Solvers – to see and be notified on new tickets from the agent‘s perspective
      • Group Asset Management administrators – to have unlimited rights to the ALVAO Asset Management

Provision your users from Microsoft Entra ID

All other users are imported/synced into Alvao based on this Microsoft tutorial

In its Step 2. Configure ALVAO to support provisioning with Microsoft Entra ID

Please use:

  1. Your Tenant SCIM Endpoint URL = https://yourcompany.onalvao.com/alvaorestapi/scim
  2. Generate a new key here: https://yourcompany.onalvao.com/Alvao/Settings/ActiveDirectory

Caution:
Provisioned users pop up in Users and need to be assigned roles (see previous slide) to become enabled Alvao users. We strongly recommend enforcing 2FA authentication in your Microsoft Entra tenant.
Note:
It might be practical for the onboarding activities, to do this also for your onboarding consultant‘s account (needs to be first invited as guest to your Microsoft Entra ID)

Set up your logo and Main page background

Go to Global settings to set up your logo and Main page background.

Mailing

Incoming email

Caution:
Do not use an inbox that is currently used for other purposes, we can do it later just before going live (e.g. helpdesk@..., servicedesk@..., support@...).

After setting up, sending an e-mail to this mailbox will either (for users that are assigned SLA there – currently, the group Requesters):

  1. Create new ticket in the root Information Technology service, or
  2. Update any existing ticket anywhere in Alvao (if the e-mail subject contains an existing ticket id)

How:

  1. Create a new temporary mailbox
  2. Register the MailboxReader app in your Microsoft Entra ID and set permissions for the full_access_as_app (as stated in product docs)
  3. Go to the Loading messages section of the “root” service for Information Technology
  4. Select Exchange Server (outlook.office365.com) and OAuth 2.0 (Exchange Online) and set up the necessary parameters
  5. Test it

Outgoing email

Can be postponed for Asset Management implementation

How:

  1. Go to the configuration Sending messages
  2. Set up the necessary parameters select Authentication = Username and Password

Note:
Depending on your Exchange Online setup, it may be necessary to:
  • Allow SMTP for the mailbox (see doc)
OAuth 2.0 will be used as soon as Microsoft starts to support it for the application use case

Microsoft Intune Connector

How:

  1. We will send your personalized link
  2. Click and accept required permissions to read your Intune devices
  3. In a few minutes, the devices will appear in your Asset Management tree in the folder Imported objects

AM agent (optional – for detailed SW scan)

This is done using the ALVAO Asset Management Agent (see docs)

How:

  1. Download directly from your Alvao WebApp instance (or our website)
  2. Install with these parameters:
    • WSURL = https://yourcompany.onalvao.com/AssetWebService/AssetWebService.asmx
    • AUTHCODE = first set up the value in Administration
    • Use default TCP port (optional)
    For company-wide use, the agent is normally distributed using GPO or SCCM and added to an image used for new computers.
  3. In a few minutes, the computer will appear in your Asset Management tree in the folder Computersfound on the network

ALVAO Add-ins

ALVAO for Outlook

ALVAO for Teams

 

Did not find what you were looking for? Ask our technical support team.