Use this procedure to activate a tenant in 365sentri. After you activate the tenant, you can manage it in 365sentri.
Before you start
Make sure that you have these items:
- The tenant shows in the Tenants view.
- Global Administrator credentials for the Microsoft 365 tenant of the client.
- Access to the multi-factor authentication (MFA) method for that account.
- A payment method, if the trial for this tenant has expired and you have not added a payment method before.
- A Blueprint or bundles in Deployment Plans. You apply them in the Deployment Plan stage of the wizard.
- Optional: A list of the Emergency Access (break-glass) accounts and the Wi-Fi SSID. You need these only if you make a variation, but have them ready now.
About the activation wizard
The activation wizard has seven stages. The wizard shows the stages in this sequence:
- Select Billing Frequency
- Payment Method
- Activation
- Integration
- Data Sync
- Variations
- Deployment Plan
This page has one section for each stage. The step numbers in each section start at 1. They are not the stage numbers of the wizard.
Open the activation wizard
In 365sentri, open the Tenants view.
Find the tenant that you want to activate.
Note If the tenant does not show in the list, click Import. Then synchronize Partner Center again or add the tenant manually.
Click Activate next to the tenant. The activation wizard opens.
Stage 1 of 7
Select billing frequency
Examine the plan and the activation price. A trial tenant does not show a price.
Select the billing frequency.

Click Next.
Stage 2 of 7
Payment method
Note If the tenant is in its trial, or if a payment method is already on file, the wizard skips this stage.
You do not have to add a payment method during the trial.
If the trial has expired and no payment method is on file, add a payment method.

Click Next.
Stage 3 of 7
Activation
In this stage, you give 365sentri consent to manage the Microsoft 365 tenant of the client.
Click Copy Link. 365sentri copies the activation URL to the clipboard.

Note Do not close this 365sentri window. You must go back to it to continue the activation.
If you close the window, the activation completes in the background. But you must then do the remaining stages outside of the wizard.
Open a new private browser window (Incognito in Chrome, InPrivate in Edge).
Note A private window prevents a sign-in with the wrong Microsoft 365 account.
Paste the activation URL into the address bar and press Enter.
Click Sign in.

Type the user name of a Global Administrator account from the Microsoft 365 tenant of the client. Click Next.

Type the password and complete the MFA prompt.

Examine the permissions that 365sentri requests. Click Accept.

Second sign-in Sometimes you must sign in and give consent a second time.
Select the Global Administrator account that is already signed in. Then grant consent to the 365sentri – Tenant Automation Enterprise Application.
Make sure that the page shows that the tenant is active in 365sentri.

Close the private browser window. Go back to the 365sentri window.
Stage 4 of 7
Integration
In this stage, you map the tenant to a client in your Professional Services Automation (PSA) tool. For example, Halo PSA.
Do one of these procedures.
If an integration is configured
Select the PSA client for this tenant.

Click Next.
If no integration is configured
The stage shows where in 365sentri you configure an integration.
Click Next.
Note If you do not use a PSA tool, click Next. You do not have to configure an integration.
After you complete the wizard, configure the integration. Refer to Halo PSA or InvGate Service Management.
Stage 5 of 7
Data sync
In this stage, 365sentri synchronizes data from the Microsoft 365 tenant of the client. The page shows the progress of the synchronization.
The Variations stage uses some of this data. For example, before you can set a user account as an Emergency Access (break-glass) account, 365sentri must synchronize the user accounts.
Do one of these procedures.
To set the variations now
Wait until the synchronization of the necessary data is complete.

Note The synchronization is a background task. You can close this page. The synchronization continues.
Click Next.
To set the variations later
Click Next. You do not have to wait for the synchronization to complete.
In the Variations stage, click Next. Do not add variations.
After the synchronization is complete, open the Tenants view.
Click the tenant.
In the tenant menu, click Variations.
Add the variations.
Note The Variations page of the tenant operates the same as the Variations stage of the wizard. For more information, refer to How to Create a Break Glass Account.
Stage 6 of 7
Variations
In this stage, you add the variations that are necessary for this client. For example, the Emergency Access (break-glass) accounts and the Wi-Fi SSID.
Some variations use data from the Data Sync stage. For example, 365sentri must synchronize the user accounts before you can select a break-glass account. If the data is not available, wait until the synchronization of the necessary data is complete.
Add the variations that are necessary for this client.

Note You can also add variations after you complete the wizard. Open the Tenants view, click the tenant, and then click Variations in the tenant menu. This page operates the same as the Variations stage of the wizard.
Click Next.
Note If this client does not need variations, click Next.
Stage 7 of 7
Deployment plan
In this stage, the wizard opens the Deployment Plans page of the tenant. On this page, you select the configuration that 365sentri applies to the tenant. You can select a Blueprint, one or more bundles, or both.
Select the Blueprint that you want to apply to this tenant.
Select the bundles that you want to apply to this tenant.
Note You can select only a Blueprint, only bundles, or both. You do not have to do step 1 and step 2.
Apply the deployment plan.
Complete
The tenant is active in 365sentri. 365sentri applies the deployment plan to the tenant. You can now manage the tenant in 365sentri.