Overview
Phin Security is a security awareness training and phishing simulation platform for MSPs. By integrating Phin with MSPortal.ai, you can:- View security awareness training progress for every client in one place
- Track per-user phishing simulation results and training completion
- Monitor active Phin campaigns for each mapped company
- Include Phin report artifacts in Security Awareness reports
Prerequisites
- An active Phin Security partner account with API access
- Your Phin Partner ID, Client ID, and Client Secret
- MSPortal.ai account with integration management permissions
Part 1: Get Your Phin API Credentials
Before connecting to MSPortal.ai, you need API credentials from Phin.1
Log into Phin
Sign in to your Phin Security partner portal with an administrator account.
2
Locate Your Partner ID
Your Partner ID identifies your MSP organization in Phin. It is available in your partner account settings.
3
Enable the Phin API
Open the partner-level integrations page in Phin and enable Phin API.
4
Generate API Credentials
From your partner settings, open the API access section and generate a set of API credentials. Phin issues a Client ID and a Client Secret.
5
Copy the Credentials
Copy the Client ID and Client Secret immediately.
Part 2: Set Up Phin in MSPortal
Phin setup runs on its connection page. The Setup guide rail lists the tasks: Connect, Choose data, Import or match companies and Review.Connect
1
Open the connection
In MSPortal.ai, go to Settings > Integrations, open the Directory tab, find Phin Security, and choose Connect. If Phin is already connected, open that connection from the Active tab instead, so you don’t create a second connection.
2
Enter Credentials
Fill in the three credential fields:
Credentials are stored in the vault and never shown again. They are never exposed in logs or API responses.
3
Test Connection
Choose Test connection to verify your credentials. On success, you see your Phin partner name, for example “Connected to Acme MSP”.If the connection fails:
- Verify the Partner ID, Client ID, and Client Secret were copied without extra spaces
- Ensure the credentials have not been revoked
- Check that your Phin account has API access enabled
4
Save
Once the test passes, choose Save and continue to save your credentials and create the connection. A successful test on its own does not save anything.
Choose data
Open Choose data to choose what MSPortal syncs from Phin. All four datasets are on by default. Each switch saves as soon as you change it, and a dataset you turn off stops syncing on the next run.Import or match companies
Open Import or match companies to match each Phin company to an MSPortal company. This decides which company each record belongs to. Only data from matched companies syncs to MSPortal.- If no companies appear, wait for the first sync or start one from the empty list. It runs in the background and usually completes within a minute.
- Review the Suggested matches and choose Accept, or use Accept N strong matches to accept every suggestion at 90% confidence or more.
- In the Import view, pick the correct MSPortal company from Choose company…, or use Import company to create one. Import companies creates several at once; an existing company with the same name is matched instead of duplicated.
- Use Ignore for a Phin company you don’t want to match, and Restore to bring it back.
Review
Open Review and choose Finish setup once the required tasks are complete. Background syncs keep running after setup finishes, so check Overview and Sync activity later if counts are still empty.What Gets Synced
Phin Security integration syncs the following data types to MSPortal:Companies
Your Phin company inventory, used for matching Phin companies to MSPortal companies.Training Status
Per-user security awareness metrics for each mapped company:- User name and email address
- Phishing simulations sent and clicked, with click percentage
- Trainings assigned and completed
- Up-to-date training status
Active Campaigns
Metadata for active Phin campaigns running in each mapped company.Report Artifacts
Metadata for Phin report PDFs, including report type, scope, file name, and creation date. These feed Security Awareness reporting in MSPortal. A report-artifact count describes synced metadata; it does not guarantee a PDF is downloadable.Synchronization Schedule
After initial setup, data syncs automatically:To refresh data without waiting for the daily sync, choose Run sync on the connection page, then All data or one dataset.
Managing Your Integration
After setup, open the Phin connection from Settings > Integrations. The Manage group in the Setup guide holds Overview and Sync activity for connection status and background results.Updating Your Credentials
1
Open Connect
Open the Phin connection and choose Connect.
2
Enter New Credentials
Update the Partner ID, Client ID, or Client Secret. Leave the masked Client Secret unchanged to keep the stored secret.
3
Test and Save
Choose Test connection to verify, then choose Save changes. A test alone does not save a replacement.
Disconnecting the Integration
Open More actions on the connection page and choose Disconnect…. This removes the stored credentials, the matches between Phin companies and your companies, and the data synced from Phin. It does not revoke the credentials in Phin.Troubleshooting
Does Test connection save my Phin credentials?
Does Test connection save my Phin credentials?
No. Use Save and continue for a new connection or Save changes for tested replacements.
Do Phin sync switches save immediately?
Do Phin sync switches save immediately?
Yes. Each switch in Choose data saves when changed.
Can I test a saved Phin secret?
Can I test a saved Phin secret?
Yes. Leave the masked secret unchanged to test the saved value. Enter a replacement if you change the associated account details.
Can I undo a removed match by closing the Phin connection page?
Can I undo a removed match by closing the Phin connection page?
No. Remove match saves immediately. Match the correct company again if you need to restore it.
Does Finish setup mean every Phin dataset has finished syncing?
Does Finish setup mean every Phin dataset has finished syncing?
No. Background syncs can continue. Check matches, dataset switches, Sync activity and the training or reporting view.
Can a company user configure Phin?
Can a company user configure Phin?
No. This setup is for MSP staff with integration management permission. Company users access only the training and reporting views their IT provider enables.
Security & Privacy
- Credential Storage: Your Phin credentials are encrypted in the vault and never exposed in logs or responses
- Data Isolation: All synced data is tenant-isolated and only visible to your organization
- Read-Only Access: MSPortal only reads Phin data; it never modifies your Phin configuration
Next Steps
After setting up the Phin Security integration:Training Module
Review security training progress across your clients
Build Reports
Include security awareness metrics in client reports
Other Integrations
Explore additional integration options
Integration FAQ
Answers to common integration questions