Overview
Pax8 is a cloud distribution marketplace for MSPs. By integrating Pax8 with MSPortal.ai, you can:- Sync subscriptions, products, and companies from the Pax8 Marketplace
- Manage active licenses and subscription quantities in the Storefront
- Offer clients a curated product catalog with approval workflows and self-service rules
- Monitor Azure usage by company
- Sync Pax8 invoices into the Invoices page (optional)
Prerequisites
- An active Pax8 partner account with admin access
- MSPortal.ai account with integration management permissions
- Companies set up in MSPortal to map Pax8 companies to
Part 1: Prepare Your Pax8 Account
Pax8 connects through OAuth, so there are no API keys to create. You authorize MSPortal directly with your Pax8 login.1
Confirm Admin Access
Make sure you can sign in to Pax8 with an account that has admin access to your partner organization.
2
Have Your Login Ready
During setup you will be redirected to the Pax8 login page to approve the connection, so keep your Pax8 credentials (and any MFA device) at hand.
MSPortal.ai never stores your Pax8 password. Only encrypted OAuth tokens are saved, in the vault.
Part 2: Set Up Pax8 in MSPortal
Pax8 setup runs on its connection page. The Setup guide rail lists the tasks: Connect, Choose data, Import or match companies and Review.Connect
1
Open the connection
In MSPortal.ai, go to Settings > Integrations, open the Directory tab, find Pax8, and choose Connect.
2
Start the OAuth Flow
On Connect, choose Sign in with Pax8. You are redirected to the Pax8 login page.
3
Authorize Access
Sign in to Pax8, complete any MFA prompt, and approve the authorization request. Pax8 then redirects you back to the connection page.
4
Connection Confirmed
Back on the connection page, Connect shows that your Pax8 account is connected. MSPortal begins fetching your Pax8 companies in the background.If you need to switch to a different Pax8 account later, use Reconnect on Connect; it forces the Pax8 login screen so you can choose another account.
Choose data
Open Choose data to choose which optional Pax8 data to sync.1
Choose Invoice Sync
Under What gets synced?, turn on Pax8 Invoices if you want your Pax8 invoices on the Invoices page, broken down by mapped company with line items and upcoming draft charges. This setting is optional and off by default.The switch saves as soon as you change it. When you turn it on, the first invoice sync starts right away. Check the Invoices page after that sync finishes; the saved switch alone does not mean invoices have arrived.
2
Sync Subscriptions
Choose Sync Subscriptions to pull active licenses from Pax8 into the Storefront module. Only matched companies have their subscriptions imported. The confirmation means the sync has started, not that every subscription and product has arrived.
Import or match companies
Open Import or match companies to match Pax8 companies to your MSPortal companies. This determines which subscriptions and usage data belong to which company.- After connecting, MSPortal fetches your Pax8 companies automatically, typically in under a minute. If the list stays empty, start a sync from the empty list.
- Review the Suggested matches and choose Accept, or use Accept N strong matches to accept every suggestion at 90% confidence or more. Suggestions are not saved until you accept them.
- In the Import view, pick the correct MSPortal company from Choose company…, or use Import company to create one. Import companies creates several at once; an existing company with the same name is matched instead of duplicated.
- Use Ignore for a Pax8 company you don’t want to match, and Restore to bring it back.
Review
Open Review and choose Finish setup once the required tasks are complete. Background syncs keep running after setup finishes. You can access the Storefront module anytime from the sidebar.What Gets Synced
Pax8 integration syncs the following data types to MSPortal:Companies
Your Pax8 company list, used for matching Pax8 companies to MSPortal companies.Products
The Pax8 product catalog, which powers the Storefront catalog and the products your clients can browse and request.Subscriptions
Active subscriptions and license quantities for mapped companies, shown in the Storefront’s Subscriptions section and used by the Licensing module’s approval and self-service workflows.Azure Usage
Azure consumption data by company, shown in the Storefront’s Azure Usage section.Invoices
Pax8 invoices for mapped companies, with line items and upcoming draft charges, shown on the Invoices page. Invoices sync only when Pax8 Invoices is turned on in Choose data.For how to use this data day to day, see the Storefront guide and the Licensing module, which covers approval workflows, catalog visibility, and client self-service. Connecting Pax8 does not turn on client purchasing; configure catalog visibility, permissions and approval rules there.
Synchronization Schedule
After initial setup, data syncs automatically:
All Pax8 data types run in a single daily sync at 06:00 UTC. Products refresh every 7 days after the first sync. Data types sync sequentially for each integration to keep the Pax8 connection stable.
You can start a sync at any time with Run sync on the connection page, or with Sync Subscriptions in Choose data.
Managing Your Integration
After setup, open the Pax8 connection from Settings > Integrations. The Manage group in the Setup guide holds Overview and Sync activity for connection status and background results.Reconnecting Your Account
If your Pax8 connection expires or you need to switch accounts:1
Open the connection
Go to Settings > Integrations and open your Pax8 connection.
2
Reconnect
On Connect, choose Reconnect and sign in to Pax8 again. Reconnecting is a fresh authorization, so check that you used the intended account and review your company matches afterward.
Disconnecting the Integration
Open More actions on the connection page and choose Disconnect…, then confirm. This removes the stored OAuth tokens, the company matches and the data synced from Pax8 (subscriptions, products, companies). Check that you selected the right connection before confirming. Disconnecting in MSPortal does not cancel any subscriptions in Pax8.Troubleshooting
Security & Privacy
- Token Storage: OAuth tokens are encrypted in the vault; your Pax8 password is never stored
- Data Isolation: All synced data is tenant-isolated and only visible to your organization
- Protected Authorization: The OAuth flow uses signed state tokens to prevent forged connection requests
Next Steps
After setting up the Pax8 integration:Storefront
Manage subscriptions, catalog, and Azure usage
Licensing
Configure approval workflows and client self-service
Other Integrations
Explore additional integration options
Integration FAQ
Answers to common integration questions