SaaS initial setup
First registration
- Go to your Alvao and sign in with your Microsoft Entra user account.
- Your account will be assigned to the following groups:
- Administrators - to be able to access Administration.
- Requesters - to be able to create tickets in the Service catalog.
- Solvers – to see the Tickets page and be notified on new tickets from the agent‘s perspective.
- Asset Management administrators – to have unlimited rights to the Asset Management.
Please note that caching permissions may cause a slight delay in activating newly assigned permissions.
Provision your users from Microsoft Entra ID
Follow the Configure Alvao for automatic user provisioning procedure to import all other users into Alvao. In the Step 2. Configure Alvao to support provisioning with Microsoft Entra ID please:
- For Tenant SCIM Endpoint URL, copy the url from the link.
- In Administration - Settings - Active Directory and Microsoft Entra ID, generate a new secret token.
Provisioned users pop up in Users and need to be assigned roles or assets to become enabled Alvao users. We strongly recommend enforcing 2FA authentication in your Microsoft Entra tenant.
If possible, please invite your onboarding consultant’s account as a guest to your Microsoft Entra ID and provision it as well.
Set up your logo and Main page background
Go to Administration - Settings - WebApp and set up your company logo, Main page background image and theme.
Mailing
Mailing can be postponed for Asset Management implementation.
Loading messages
Messages sent to Alvao inbound mailbox/mailboxes
For trial purposes, do not use an inbox that is currently used for other purposes. We can do it later just before going live (e.g. helpdesk@..., servicedesk@..., support@...).
After setting up, sending an email to this mailbox will either (for users that are assigned SLA there – currently, the group Requesters):
- Create new ticket in the root Information Technology service, or
- Update any existing ticket anywhere in Alvao (if the email subject contains an existing ticket id).
How:
-
Create a new temporary mailbox.
-
Register the Alvao Service application in your Microsoft Entra ID and set permissions for the full_access_as_app.
-
Go to the Administration - Service Desk - Services - Information Technology service - Edit - Loading messages.
-
Select the Exchange Server option and enter the outlook.office365.com server address.
-
Select the OAuth 2.0 (Exchange Online) option and enter the necessary parameters.
-
Test it.
For more information about Incoming messages, go to Loading messages.
Sending messages
Messages and notifications sent from Alvao
How:
- Go to Administration - Settings - Sending messages.
- Enter the necessary parameters for the OAuth 2.0 (Exchange Online) setup.
Asset Management
Microsoft Intune Connector
How:
-
Go to Administration - Settings - Microsoft Entra ID.
-
Click on the Microsoft Intune Connector - Provide consent link and accept required permissions to read your Intune devices.
-
Tick the Enable checkbox and click the OK button.
-
Devices are loaded and updated in one-hour cycles. You will find them in the Imported objects folder on the Objects page.
We recommend using the Autogenerated Asset Tree to autosort devices under their primary users.
AM agent (optional – for detailed SW scan)
How:
- Download the ALVAO Asset Management Agent installation package. Alternatively, you can download it from:
- The user menu in the top right corner - Settings - Install applications
- ALVAO download page
- Install the agent with these parameters:
- APIURL = copy the url of the Alvao REST API.
- AUTHCODE = first set up the value in Administration - Asset Management - Settings - Scan - Agent authentication code.
- Use default TCP port (optional).
For company-wide use, the agent is normally distributed using GPO and added to an image used for new computers.
- In a few minutes, the devices will appear on the Objects page - Found network devices folder.
For more information on the agent, see Agent.
Portraits and users presence
Go to Administration - Settings - Microsoft Entra ID. Provide consent and enable features:
- User portraits from Microsoft Entra ID
- User presence