Skip to main content
Connect each rollout company to its own Microsoft 365 tenant so MSPortal can sync users, licenses, and Secure Score. This page is for MSP staff with integration access, plus someone who can approve consent in the client’s Microsoft tenant.

​
Before you start

  • You need permission to manage companies or integration company mappings.
  • A Microsoft 365 administrator for each client tenant must be available to approve the permissions, or you must have admin credentials for that tenant.
  • Your rollout companies must exist in MSPortal.
  • Allow pop-ups for MSPortal. Consent opens in a pop-up window.

​
Connect each company

1

Open the step

In Launch Center, select Connect Microsoft 365 in Setup guide. It shows the Microsoft 365 companies list. You can also go to Settings > Integrations > Microsoft 365 > Companies.
2

Find the company

Use Search companies… or the filter to find the rollout company. Check that you are on the right company before you connect.
3

Click Connect

Click Connect on the company’s row. A pop-up opens the Microsoft sign-in page.
4

Sign in and approve

Sign in with an administrator account from the client’s Microsoft 365 tenant. Read the permissions on the Microsoft consent screen and the target tenant, then approve. Finish any acknowledgment MSPortal shows first. The pop-up closes and the list refreshes.
5

Check the connection

Confirm the row shows Connected with the right Microsoft tenant. A pop-up that closed is not proof of a healthy connection.
6

Repeat for each company

Work down your rollout companies.
If the client’s admin cannot sign in from your browser, use Actions > Generate Link on the row and send them the link. It works once and expires in 7 days. See Connecting Companies to Microsoft 365 for links, reconnecting, and disconnecting.

​
Check the data

1

Look at the sync

Check Last synced on the row. It covers users and groups. For licenses and Secure Score, open the Cloud page for that company.
2

Set up client users

Importing users and assigning access is separate from consent. See Prepare Company users.
3

Check Launch Center

In Launch Center, open Live verification and check A healthy Microsoft 365 connection is available. It is blocking when Microsoft 365 is your data source or you added it as an integration.

​
Match the rollout scope

The check needs a healthy connection for every rollout company and for any companies you selected for Microsoft 365. Connecting one company does not clear the others. For a pilot, it covers the pilot company. If a company should not be in this launch, change the plan with Edit launch plan. Do not connect an unrelated tenant just to clear a finding.

​
Troubleshooting

​
Frequently asked questions

No. Every required company needs its own healthy connection.
No. Check that the row shows Connected, then check the sync.