Upgrading MSP Mode Accounts to Freshworks Organization :

Last updated: 2021-09-08

Source: https://support.freshservice.com/support/solutions/articles/50000003564-upgrading-msp-mode-accounts-to-freshworks-organization

What is the Freshworks Organization?

Separate administrative settings across multiple accounts and products are always difficult to control and manage. From password policies to user management, a unified approach to managing them across products enables admins to have more centralized control.

Introducing Freshworks Organization, which comes with:

A centralized dashboard for user management and security settings across Freshworks products and Freshservice accounts that you use

A unified login experience for your requesters and agents

A Switcher for users to seamlessly navigate between other Freshworks accounts and products.

With this upgrade to Freshworks Organization, you will see some changes to your product experience. To learn more, refer to the detailed documentation of the changes here.

Before you get started on how to upgrade...

To understand the upgrade process better, here are some terms and concepts associated with setting up security policies in Freshworks Organization for MSP accounts:


Concepts	Terminologies
Types of Portals<br>Freshservice provides two kinds of portals to enable you to manage your clients better.	Default Portal<br>Every Freshservice account has a default login portal, which can be set up from Admin Settings > Service Desk security. It’s typically used for agents to login to the Freshservice account.<br>Support Portal<br>To suit your business needs, you can create multiple portals as required for your end-users from Admin > Support Channels > Support Portals.
Types of Security Policies<br>To manage your login policies efficiently across your Freshworks products and accounts, Freshworks Organization offers two types of security policies.	Default Policy<br>All Freshservice accounts, portals, and other Freshworks products that do not have custom policies in place will use the default login policy.<br>Custom policy<br>When you need exclusive security policies to be set up with different identity providers, you can create custom policies and map them to the respective Freshservice accounts, portals, or other Freshworks Products.

To understand in detail on how to set up security policies using Freshworks Organization, you can read our article here.

How do I upgrade to Freshworks Organization?

To help you understand the upgrade process better, we have broken down the process into 3 steps. You can read them step-by-step as you proceed through the process.

Watch our demo video to understand the migration process better:Watch Now

Step 0 - Getting started with the upgrade

Watch our demo video here to understand the migration process better: Watch Now

To enable you to seamlessly upgrade to Freshworks Organization, we have enabled a self-service wizard to help you migrate the login policies of your portals to Freshworks Organization.

Note:

Only Admins with Play God access to your account will be able to view and use this self-service wizard.

To access this wizard:

1. Navigate to Admin > Service Desk Security Settings to view the migration wizard.

2\. You can view if the pre-upgrade login methods have been matched with post-upgrade login methods by clicking on “View upgrade readiness of all portal"

Understanding Migration Statuses

When you click on upgrade readiness, every portal will have a status mapped against it to help you understand the course of action that you need to take.


Status	Action Expected
Matched	No action expected. This means the login settings set up for your portal has been auto-migrated as it was using Google / Password-based login.
Not Matched	Check your login policies set up on Freshworks Organization. This means there has been a mismatch after your Google/ Password-based login settings from Freshservice were auto-migrated to Freshworks Organization.
SSO verified	No action expected. This means that your SSO setup has been successfully completed in Freshworks Organization.
SSO not verified	SSO setup needs to be completed for your portal on Freshworks Organization. In the upgrade readiness panel, click on Go to Portal Settings for the portal you need to migrate the policy for. Here, you will find a 2-step self-service wizard to help you migrate the portal’s SSO configuration to Freshworks Organization.

Note: Creation of new portals will be disabled until you upgrade to Freshworks Organization

Now that you're done with Step 0, if you have “SSO not verified" status for any of your portals, you will need to migrate the setup to Freshworks Organization.

Step 1 - Reconfigure SSO in Freshworks Organization

Going forward, Freshworks Organization will interact with your SSO identity provider, complete your authentication process, and then authorize you to access your Freshservice account. You will therefore need to reconfigure your SSO to work with Freshworks Organization instead of Freshservice.

To reconfigure your SSO, click on “portal settings” for the portal you want to reconfigure from the View upgrade readiness pane. You will see a 2-step wizard here to guide you through the steps involved in migrating your SSO setup.

1\. Activate your Freshworks Organization Account and reconfigure SSO

Activating your account:

Check your mail for an activation email and click on the link to activate your Freshworks Organization account. Note: If you are upgrading to an existing organization account, you can skip this activation step and get started with setting up your SSO in the organization’s security module.

You will now be redirected to a Freshworks Organization Account activation page, where you can set up your account either by entering your profile information or by using Google login.

Reconfiguring your SSO:

Once you activate your Freshworks organization account, navigate back to your Portal Settings page on Freshservice and click on Go to Freshworks Security (or) Navigate to Freshworks Organization > Security > Custom Policies.

All your secondary portals will have custom policies created on Freshworks Organization with Google Login and Password login (Freshworks Login) enabled.

For all portals with "Matched” status, the custom policies are good to go.

For portals with “SSO not verified” status, edit the custom policies to enable and configure SSO.

Click on Edit for the required policy. The portal to which this policy is mapped will be auto-selected.

Click on Next. Here, enable SSO Login. You can create the SSO login policy of your choice here. Refer to our documentation here to know about the different SSO providers supported, and how to set them up.

Heads-up: If you’re using a SAML-based identity provider, ensure that all your Freshservice users can seamlessly login post-migration by adding them to the Freshworks application that you have installed.

Once you complete your SSO setup, click on Next. Here, you can add a name to your custom policy, a redirect URL, and portal logos if required.

Click on Finish to save changes to the custom policy.

Now navigate back to Freshservice’s service desk security page and refresh it to proceed.

Note:

All custom policies that were created for your existing portals will have password-based / Google login is turned on. Post-migration, this can be disabled if required.

Setting up a Default Policy

If you have SSO policies set up for your default portal (agent portal) under service desk security settings, then:

Navigate to Freshworks Organization > Security > Default Login Methods.

Now enable SSO Login and set up SSO for the identity provider of your choice.

Note: All Freshservice accounts, portals, and other Freshworks products that do not have custom policies in place will use the default login policy. If you already have a default login method in place to suit the needs of your other products / accounts, you can create a custom policy for your default portal.

2\. Test your configuration

In this step, you need to test your SSO setup to ensure that it works with Freshworks Organization.

Refresh your Freshservice Service Desk Security page to enable Step 2. Click on Test to test your SSO login using Freshworks Organization.

Click on Sign in with SSO from the Freshworks login page and log in using your SSO credentials.

If your SSO policy has been set up successfully, you will be able to login with your credentials and see a success message.

Now click on Go to Service Desk Security Page.

Note:

Ensure that the SSO policies are configured for all portals with “SSO not verified” status by repeating the above process for each of them.

Now that you're done with migrating the SSO for all portals, you're ready to complete the upgrade.

Step 2 - Upgrading to Freshworks Organization

This is the final step to upgrade your account to Freshworks Organization.

Once you’ve configured and tested your SSO setup for all portals, the Upgrade button will be enabled under “View upgrade readiness of all portals”. Click on it.

Note: You can upgrade to Freshworks Organization only if all your portals have a status of either “Matched” or “SSO Verified”.

Once you click on it, you’ll get a confirmation prompt requesting you to ensure that all your users are mapped to the Freshworks application in the SSO identity provider you configured. Note that when you click Upgrade, all your Freshservice users might be logged out and they may have to login again into Freshworks Organization.

Click on Upgrade to complete the migration process.

Note: Once you’ve upgraded to a Freshworks Organization account, you can disable the password/Google login options in your custom/default security policies if you don’t need them any longer.