Skip to main content
Connect Kaseya SaaS Protection to report Microsoft 365 backup inventory and health. The wizard uses Connect → Configure Sync → Map Domains → Status.

​
Before you start

This is an MSP staff task requiring integration-management permission and authorized vendor credentials. This provider is available only when enabled for your MSP tenant. If its setup page is unavailable, check availability with your MSPortal administrator. Company users do not configure this connection. Use the Public API key and Secret API key for Kaseya SaaS Protection, formerly Backupify. These are separate from Datto RMM credentials. Obtain a pair from the vendor API-key administration for your authorized account.

​
Connect and save credentials

  1. Open Settings > Integrations, find Kaseya SaaS Protection, and open its setup action. For an established connection, choose Configure on that connection.
  2. Enter the credential pair and select Test Connection.
  3. Review the result. A successful API response can still return no accessible domains; confirm the account has the intended scope.
  4. Select Create Integration to save a new connection. On an existing connection, use Save credentials after testing changed values.
The test and save are separate. Changing a field invalidates the prior test result. An existing saved connection indicator does not mean a new live test just ran.
Kaseya Saas Protection connection form with blank credential fields and test and save controls

MSP example: connection form before credentials are submitted.

​
Choose the data to synchronize

Customer domains are always discovered for mapping. Choose Seat inventory and Backup health and history, then select Save sync settings. Detailed data is fetched for domains linked to MSPortal companies. Creating a connection, saving replacement credentials or saving sync settings can request background synchronization. Check its result rather than treating the save as proof that all data is ready. Changing the switches is a draft until Save sync settings succeeds. Save this step before navigating onward; the mapping save is a separate operation.

​
Map domains to companies

  1. Open Map Domains and review the discovered names and domains.
  2. Choose the existing MSPortal company for each intended row. Quick Match provides suggestions to review; it does not establish that the company is correct.
  3. Check both selected imports and pending links, then use Import Selected to apply them. The wizard also attempts to save pending mappings before leaving the mapping step.
  4. Verify the saved company association before relying on company-scoped reporting.
Removing a saved link takes effect immediately. Creating a company on the mapping screen creates it immediately, while its link is pending until saved. Reuse existing companies where appropriate. Leaving the mapping step can start a detailed background sync.

​
Read status and backup health

In Status, review mapped domains, protected seats or users, services backed up, workload summaries and the last-sync value. If Backup data is still preparing appears, check the mapping and first detailed sync before interpreting missing data as healthy. Use View backup health to continue to the Backup module, or Manage mappings to return to company mapping. Complete Setup exits the wizard; it is not a guarantee that all workloads have finished synchronizing. The provider reports backup success at workload level. MSPortal can show protection states for users, shared mailboxes, sites and Teams, but a missed workload backup does not identify the particular active resource that caused it. Use the provider’s reporting for resource-level investigation.

​
Maintain or disconnect

Reopen the specific connection to review status or replace credentials. Test the changed values and use Save credentials. Do not regenerate vendor credentials simply to retry a page load. To remove the connection, use its delete/disconnect control, read the named confirmation and proceed only when you intend to remove the stored connection and associated synchronized data. Removing MSPortal’s connection does not revoke the vendor credential itself.

​
Troubleshooting

​
Frequently asked questions

No. Use Create Integration for a new connection or Save credentials for a tested replacement.
No. Select Save sync settings before leaving that form.
No. Review the companies and apply the pending links. A saved unlink is an immediate change.
No. This wizard configures reporting. Perform recovery in the backup provider.
No. Check mapping, source coverage and sync errors before drawing a conclusion. The provider reports backup success at workload level. MSPortal can show protection states for users, shared mailboxes, sites and Teams, but a missed workload backup does not identify the particular active resource that caused it. Use the provider’s reporting for resource-level investigation.