Support & Documentation
Please contact us if you cannot find the information you're looking for
and we'll get back to you as soon as possible.
Welcome to Evo Security!
Our mission is to enable our Partners in their quest to protect their clients from cyber criminals. Thank you for the opportunity to work together and thank you for trusting our team and our software. We exist to serve you.
The information below should help acquaint you with the architecture of Evo MFA and the first steps to getting started. You'll be up and running in no time.
Basic Architecture
Evo MFA is built around four main components:
Tenants - A Tenant is representative of your Client
Directories - Source of truth for Users (Ex: Azure AD, On-Prem LDAP/AD)
Users - A Client's employees or end users
Keys - Created by Users to get push notifications or 6-digit codes
Evo MFA has a substantial amount of functionality built around these core pillars built specifically for the MSP.
First Steps
Gettings started is very simple. After creating your free environment from our website, the first thing you need to do is add a Directory. Next, create a Tenant and select the checkbox to assign your Directory to your Tenant.
Once completed, you can click on Users and see that all Users from your Directory are visible and eligible for self-enrollment. From here, you can setup a new integration from the Integrations page in Settings, or create an email enrollment campaign to onboard your end users.
Repeat this process for each Client you wish to start protecting.
About Tenants
A Tenant is representative of a Client that you manage. In Evo, a Tenant is the highest level of heirarchy and can contain any number of Directories. For most customers, setting up a single Tenant for each Client is a common approach.
Adding a Tenant
Adding a Tenant is really easy:
1. Click on Settings, then Select Tenant in the header sub-menu
2. Click on the button in the top-right that says Add New Tenant
3. In the new screen, enter the Tenant name (Ex: "Acme Co")
4. Click save
View or Edit a Tenant
Tenants can be viewed or edited at anytime as follows:
1. Click on Settings, then Select Tenant in the header sub-menu
2. Click the toggle icon in the Tenants table and select Edit
Note that the Tenant name cannot be changed once it's created. If you prefer a different name, simply create a new Tenant and add any pre-existing Directories.
About Integrations
Integrations are used to connect Evo with the systems and applications you want to secure with MFA. They are built on top of widely accepted authentication protocols, including: SAML, RADIUS, and OpenID Connect (coming soon).
Getting Started with Integrations
In the admin portal, navigate to Settings, then click the Integrations menu item. From here, you will see a library of selections, the ability to search, or an option to filter between creating a new integration, or viewing/editing existing integrations.
Office 365 Integration
On the Integrations page, select Create New, then select the Office 365 integraton card. Alternatively, you can search for Office 365 in the search bar. Establishing the actual connection to Office 365 is easy:
- First, select the Tenant and Directory desired, then copy/paste/run the powershell script provided
- Next, login to Azure at https://portal.azure.comith the email domain extension you're trying to connect.
- In the search bar at the top, type "App Registrations" and click the line item when it appears
- Click "+ New Registration"
- Name the app (Ex: "Your Company Name Azure AD"), Select the second radio button (Any Azure AD directory - Multitenant). Click Register.
- In the new app screen, safely copy and store the Application (client ID), Directory (Tenant ID), and Object ID
- Click "Certificate & Secrets" in the left-hand column
- In the new Certificate screen, under Client Secrets, click "+ New Client Secret", create a name of your choice and set it to Never Expire in the popup
- Safely copy and paste the client secret along with the other credentials above into the input boxes provided. You may now logout of Azure.
- Click the "Create Integration" button
About Directories
Evo MFA establishes trust with your on-premise or cloud Directory as the source of truth for all users. If a user is removed from your synced Directory, then the user is also removed from Evo automatically.
We can sync with your on-premise Active Directory via LDAP, or with your Azure Active Directory. Each sync process is quick and easy. You can also assign one or more Directories of any type to a Tenant.
Sync an On-Prem LDAP/AD Directory
Syncing Evo MFA to an on-prem AD is really easy:
- Click on Settings, then Select Directory in the header sub-menu
- Click on the button in the top-right that says Add New Directory
- In the new screen, enter the Tenant name (Ex: "Acme On-Prem AD")
- Next, select the LDAP/AD button. Click the background of the box and activate the Active Directory toggle
- Enter the ldap or ldaps URI to your AD
- Then, enter the Base DN, Bind DN, and Bind DN Password for your AD
- Test the connection to make sure it synced, then click the Create Directory button
Sync an Azure AD Directory
Syncing Evo MFA to Azure AD is really easy. First we need to create a new app in Azure (3-5min):
- Login to Azure at https://portal.azure.comith the email domain extension you're trying to connect.
- In the search bar at the top, type "App Registrations" and click the line item when it appears
- Click "+ New Registration"
- Name the app (Ex: "Your Company Name Azure AD"), Select the second radio button (Any Azure AD directory - Multitenant). Click Register.
- In the new app screen, safely copy and store the Application (client ID), Directory (Tenant ID), and Object ID
- Click "Certificate & Secrets" in the left-hand column
- In the new Certificate screen, under Client Secrets, click "+ New Client Secret", create a name of your choice and set it to Never Expire in the popup
- Safely copy and paste the client secret along with the other credentials above. You may now logout of Azure.
Next, we need to sync this app inside Evo (2-3min):
- Click on Settings, then Directories, then Add New Directory
- In the new screen, enter the Directory name (Ex: "Acme Azure AD")
- Enter the Azure app information you safely stored from the previous steps and click the Sync button
- Click the Create Directory button
If any errors occur, double-check that all of the information input in the steps above are exactly correct.
View or Edit Directories
Create custom landing pages with Omega that converts more visitors than any website. With lots of unique blocks, you can easily build a page without any design or custom coding. with Omega that converts more visitors than any website.
About Users
Two types of Users exist in the platform: Admins and End Users ("Users"). Admins are able to sign in to admin portal and end users can only sign in to the user portal.
How to Create Users
When a new environment is created, the person who creates the environment is designated as the first Admin User, or the "Global Admin." That Admin can subsequently created more Admins as follows:
- Sync a Directory and assign Admin status to people from that Directory
- Manually add a new Admin wihtout syncing a Directory
The original Global Admin or any new Admins can create new End Users as follows:
- Sync a Directory
- Manually add a new user wihtout syncing a Directory (coming soon)
How to Manually Add an Admin User
Manually adding and Admin User is easy:
- Navigate to the Users page in the Admin portal
- Click the Add New User button
- Select "Admin" in the dropdown on Step 1
- Enter the email address and name of the user, then click done
About Keys
Keys are created in the Users mobile device when they scan a QR code generated in the user portal (Admins can scan a QR in their admin portal as well). The Key has a rolling, 6-digit code, and is automtically setup for receiving push notifications.
When a User attempts to login to a system or application integrated with Evo MFA, the User will enter their email and password, then click "approve" on thier mobile device or enter the 6-digit code from their Key.
How to Create a Key - End Users
Creating a Key for End Users is quick and easy:
- Go to evosecurity.com and click "sign in"
- Enter your organization's environment extension
- Enter your email address and password, then confirm your second factor
- Once in the user portal, click the "Create New Key" button
- Scan the QR using the Evo Auth mobile app
How to Create a Key - Admins
Creating a Key for Admins is quick and easy:
- Go to evosecurity.com and click "sign in"
- Enter your organization's environment extension
- Enter your email address and password, then confirm your second factor
- Once in the Admin portal, go to the Keys page, then click the "Create New Key" button
- Make the appropriate selections, then click "Create Key"
- Scan the QR code, and then close the page
About Enrollment
Enrollment is where Admins can create and schedule email campaigns to help onboard their end users.
Evo offers granular functionality so Admins can create a customer campaign for their unique needs. Once a campaign is created, Admins can also quickly select "auto-onboard," so any new user added to a Directory automatically receives an email explaining multi-factor authentication and directions to enrolling.
How to Create a New Enrollment
Creating a new email enrollment campaign is easy:
- In the Admin portal, navigate to Settings, then click Enrollment
- Click the Add New Enrollment button
- Select which Tenant and Directory you want to send to
- Select your timezone and if you want to exclude any users
- Create emails and assign modifiable templates
You can delete emails using trash can icon and then re-assign send dates using the datepicker.
Remember to save your enrollment as a draft before clicking away from the page, otherwise your progress will be lost. You can return to a draft and finish your progress at any time.
Managing Enrollments
Managing Enrollments is simple. On the Enrollment landing page in Settings, you can select between All, Schedule, and Drafts.
- All - Lists both Scheduled campaigns and Drafts
- Scheduled - Lists only live, Scheduled campaigns
- Drafts - Lists only incomplete campaigns saved as drafts
At any time, you can modify or edit a Scheduled campaign or a Draft campaign. Scheduled campaigns can be deleted, but any emails sent previously will not be recalled.
About White Labeling
White-labeling allows the Admin portal, User portal, and MFA login pages to be re-branded with your MSP customer logo and color schemes.
Today, we offer a simplified white-labeling functionality that only allows for the logo to be changed across the platform, but color schemes are only changeable in the Admin portal.
How to Use White Labeling
To change the logo and color scheme:
- In the Admin portal, navigate to Settings, then click White Label
- To change the logo, click on the large gray button and upload a .png file
- To change the color schemes, click the box next to each category and pick the desired color
About Activity
The Activity page is where Admins can review user authentication activity and see a full audit trail of Admin activity. Simply toggle back and forth between each page to review data. To export data, click on the export button in the top right.
About Evo's iOS App
The iOS app is used to scan a QR code generated in the Evo platform and syncs the User's device to Evo MFA. Once the QR code is scanned, a Key appears in the app containing a 6-digit rotating code. Keys are automatcally setup to receive push notifications.
The following capabilities also exist:
- Swipe right on a Key to edit the Key name
- Swipe left on a Key to delete the Key
- Press and hold the Key to move it up or down
- Tap the Key once to copy the 6-digit code
End Users can access the user portal via the URL sent in an Enrollment email campaign, or Admins can direct Users directly using other preferred methods.
About Evo's Android App
The Android app is used to scan a QR code generated in the Evo platform and syncs the User's device to Evo MFA. Once the QR code is scanned, a Key appears in the app containing a 6-digit rotating code. Keys are automatcally setup to receive push notifications.
The following capabilities also exist:
- Swipe right on a Key to edit the Key name
- Swipe left on a Key to delete the Key
- Press and hold the Key to move it up or down
- Tap the Key once to copy the 6-digit code
End Users can access the user portal via the URL sent in an Enrollment email campaign, or Admins can direct Users directly using other preferred methods.
Welcome to Evo Security!
Our mission is to protect your company or organization's livelihood against cyber criminals. Thank you for the opportunity to serve you and please let us know if you have suggestsions, see room for improvement, or run into any problems.
The information below should help acquaint you with Evo MFA and the first steps to getting started. You'll be up and running in no time.
Learn More
For MSPs
© 2020 Evo Security, Inc.