How MSP accounts work

An MSP (managed service provider) account lets an IT business run phishing tests and training for its client businesses. You sign in once, see every client on one page, and switch into any client to work in it.

How the account fits together

• Your organisation is your own business in OutPhish. Your logins live here, and you can test your own staff here like any other organisation.
• Clients are separate organisations that you manage. Each client has its own staff, campaigns, settings and reports.
• MSP staff are logins in your organisation that have been given Admin or Technician access to your clients. See MSP staff.

The menu on the left has a Managed service section with Clients, plus MSP staff and MSP settings for MSP admins. Below it are the usual pages (Home, Staff, Campaigns and so on) for whichever organisation you’re working in.

Get an MSP account

You can’t turn your organisation into an MSP account yourself. OutPhish reviews each request first.

If you already use OutPhish:

1. Go to Settings.
2. In the Are you an IT provider? card, click Ask to manage clients.
3. Answer About how many client businesses do you look after? Add your Website and a message if you like.
4. Click Send request.

The card shows that your request is waiting for review. Once it’s approved, your organisation’s admins and its billing owner become MSP admins, and each gets an email explaining how to add clients.

The card only appears for people who manage the organisation. It doesn’t appear in an organisation that is already an MSP, or that is managed by one.

If you haven’t signed up yet, OutPhish can set up an MSP account for you on request. You’ll get an email with a Choose your password button. The link lasts 7 days and works once. If it has expired, use Forgot password on the sign-in page.

Switch between your organisation and a client

When you sign in, you start in your own organisation on the Clients page. Every sign-in starts there, even if you were working in a client last time.

To work in a client, do either of these:

• On the Clients page, click Open under the client’s name.
• Click your organisation’s name at the top of the menu. Under Work in, choose the client.

While you’re in a client, a banner at the top of each page says Working in the client’s name. Everything you do, such as adding staff or changing campaign settings, applies to that client only.

To go back, click Back to your organisation’s name on the banner. Or click the name at the top of the menu and choose your organisation, marked (your organisation). Either way, you land on the Clients page.

What clients see

Clients don’t need logins. Your MSP staff do the work inside each client.

The client’s staff (the people who receive tests and training) see your business name and logo instead of OutPhish’s, with a small “Powered by OutPhish”. This appears on the training page and in emails such as training reminders and the email saying tests have been switched on or off. You set the name, logo and support email in MSP settings.

If a client wants to look at its own results, an MSP admin can invite people at the client to log in:

1. Open the client.
2. Go to Settings and, under Users & Roles, click Invite User.

The invited person’s address must use the same email domain as the client’s main contact email. People who log in for a client see only that client’s organisation. They get the usual emails for their role. Your alert settings only add your own team on top. See Users and roles.

How billing works

One plan, on your own organisation, covers you and all your clients.

• The plan is priced on the total number of active staff across your organisation and every client. Active staff are staff who haven’t been archived.
• Any staff limit on your plan applies to that total, not to each client. For example, on the Free plan in Australia and New Zealand, the 15 active staff are shared between your organisation and all your clients.
• The Clients page shows how many active staff you have against your plan’s capacity, under Your plan.
• If you go over capacity, or your plan stops being active, tests are paused for every client. The Clients page tells you why. Fix it by renewing the plan, increasing capacity or archiving staff.

You manage the plan in your own organisation. Click your name at the bottom of the menu, then Subscription. Only your organisation’s billing owner can change the plan.

Inside a client, Subscription shows that the client is covered by your plan, and how many of the active staff are in that client. Click Manage billing in your organisation’s name to go back to your own plan.

Note

A client that already pays for its own OutPhish subscription (for example, an existing customer that OutPhish moved under your account) keeps paying for it. Its staff don’t count towards your plan until that subscription is cancelled. Then it moves onto your plan.

For prices and plan changes, see Subscription and billing and Staff and your plan.

The getting started guide for MSPs

MSP admins get their own version of the getting started guide. Technicians don’t see the guide. Its steps are:

1. Add Your MSP Details: set your business name and support email in MSP settings.
2. Add Your First Client: add a client and confirm you have its permission to test its staff.
3. Add the Client’s Staff: while working in the client, add its staff from the Staff page.
4. Set Each Client’s Email Platform: in the client’s Campaigns, set Email platform to Office365 or Google to match the email its staff use, then save.
5. Agree the Email Templates With Each Client: go through the email templates with the client and turn off any it isn’t comfortable with.
6. Allow Sending, Then Switch Tests On: ask the client’s IT team to allow OutPhish’s emails, then turn on Scheduling in Campaigns.

Repeat steps 3 to 6 for each new client. For how to open, skip or restart the guide, see Getting started guide.