SaaS initial setup
First registration + user account setup
- Register your Microsoft Entra account at your Alvao instance URL: https://yourcompany.onalvao.com/
Your account will be automatically:
- created as a user in Alvao and
- added to the system group Administrators
- Set up necessary permissions for your account (assign to groups)
- You can do this from the Users or Groups in the Administration part in ALVAO WebApp
- Group Requesters - to be able to create tickets in the Service Catalog
- Group Solvers – to see and be notified on new tickets from the agent‘s perspective
- Group Asset Management administrators – to have unlimited rights to the ALVAO Asset Management
Provision your users from Microsoft Entra ID
All other users are imported/synced into Alvao based on this Microsoft tutorial
In its Step 2. Configure ALVAO to support provisioning with Microsoft Entra ID
Please use:
- Your Tenant SCIM Endpoint URL = https://yourcompany.onalvao.com/alvaorestapi/scim
- Generate a new key here: https://yourcompany.onalvao.com/Alvao/Settings/ActiveDirectory
Caution:
Provisioned users pop up in
Users and need to be assigned roles (see previous slide) to become enabled Alvao users.
We strongly recommend enforcing 2FA authentication in your Microsoft Entra tenant.
Note:
It might be practical for the onboarding activities, to do this also for your onboarding consultant‘s account (needs to be first invited as guest to your Microsoft
Entra ID)
Set up your logo and Main page background
Go to
Global settings to set up your logo and Main page background.
Mailing
Incoming email
Caution:
Do not use an inbox that is currently used for other purposes, we can do it later just before going live (e.g. helpdesk@..., servicedesk@..., support@...).
After setting up, sending an e-mail to this mailbox will either (for users that are assigned SLA there – currently, the group Requesters):
- Create new ticket in the root Information Technology service, or
- Update any existing ticket anywhere in Alvao (if the e-mail subject contains an existing ticket id)
How:
- Create a new temporary mailbox
- Register the MailboxReader app in your Microsoft Entra ID and set permissions for the full_access_as_app (as stated in
product docs)
- Go to the Loading messages section of the “root” service for Information Technology
- Select Exchange Server (outlook.office365.com) and OAuth 2.0 (Exchange Online) and set up the necessary parameters
- Test it
Outgoing email
Can be postponed for Asset Management implementation
How:
- Go to the configuration Sending messages
- Set up the necessary parameters select Authentication = Username and Password
Note:
Depending on your Exchange Online setup, it may be necessary to:
- Allow SMTP for the mailbox (see doc)
OAuth 2.0 will be used as soon as Microsoft starts to support it for the application use case
Microsoft Intune Connector
How:
- We will send your personalized link
- Click and accept required permissions to read your Intune devices
- In a few minutes, the devices will appear in your Asset Management tree
in the folder Imported objects
AM agent (optional – for detailed SW scan)
This is done using the ALVAO Asset Management Agent (see docs)
How:
- Download directly from your Alvao WebApp instance (or our website)
- Install with these parameters:
- WSURL = https://yourcompany.onalvao.com/AssetWebService/AssetWebService.asmx
- AUTHCODE = first set up the value in Administration
- Use default TCP port (optional)
For company-wide use, the agent is normally distributed using GPO or SCCM and added to an image used for new computers.
- In a few minutes, the computer will appear in your Asset Management tree in the folder Computersfound on the network
ALVAO Add-ins
ALVAO for Outlook
ALVAO for Teams
Did not find what you were looking for? Ask our technical support team.