This guide is for customer admins whose service provider has pre-onboarded their workspace in ContraForce. You’ll receive an invite email from your service provider. Click the link to start.Documentation Index
Fetch the complete documentation index at: https://docs.contraforce.com/llms.txt
Use this file to discover all available pages before exploring further.
Who is this for?
- Customer security or IT admins completing the wizard their MSP/MSSP started for them
- Global Administrators in the customer’s Microsoft Entra tenant who need to grant ContraForce access
Prerequisites
| Requirement | Why |
|---|---|
| Microsoft Entra Global Administrator | Required the very first time anyone from your tenant signs in, to grant ContraForce permission to read your security data |
| Invite email from your service provider | The link in this email is your onboarding entry point |
Pop-ups allowed for portal.contraforce.com | The Microsoft consent prompts open in a popup window |
Step 1: Grant ContraForce Access to Your Tenant
When you click the link in your invite email, you’ll be redirected to Microsoft to sign in. The first time anyone from your organization signs in, a Global Administrator must approve ContraForce.Sign in as a Global Administrator
You’ll be redirected to Microsoft. Sign in with your Global Admin credentials.
Review the requested permissions
Microsoft displays a consent screen listing the permissions ContraForce needs to read security data from your tenant.
Step 2: Sign In
After consent is granted, sign in with your admin account. ContraForce recognizes that your service provider has already created your workspace, so you’ll skip account creation and go straight into the Setup Wizard.Step 3: The Setup Wizard
The wizard walks you through connecting your security tools to ContraForce. It’s mostly automatic. The modules your service provider pre-selected are already chosen for you, and you just confirm them and grant consent for each one.3a. Connect Detection Sources
The wizard shows the detection modules your MSP pre-selected (for example, Microsoft Sentinel and Defender XDR).Review the pre-selected detection modules
Each module your service provider chose appears with a Connect button.
Click Connect on each module
A Microsoft consent prompt opens. Sign in if prompted, review the permissions, and click Accept.
Microsoft Sentinel customers: Connecting Sentinel triggers ContraForce to deploy the supporting Azure infrastructure in your subscription automatically. You don’t need to run a separate Azure deployment step. The deployment runs in the background after you grant consent. Allow a few minutes for resources to appear.
3b. Connect Response Modules
Same flow as detection. Confirm each pre-selected response module and grant consent.Review the pre-selected response modules
Response modules enable Gamebook actions like isolating devices, disabling users, and quarantining files.
3c. Wizard Complete
When every module is connected, the wizard shows a completion screen and hands you off to the Command page.
Step 4: Get Started Checklist
The first time you land on the Command page, you’ll see the Get started with ContraForce panel. It lists what’s left to do. The customer checklist is shorter than the MSP version because your service provider already handled the agent center and account setup.| Item | What it means |
|---|---|
| Connect detection sources | Finish any detection modules you skipped in the wizard |
| Connect response modules | Finish any response modules you skipped in the wizard |
Re-opening the Detection or Response Picker
Click Start next to either item. ContraForce takes you straight to your Workspace settings → Modules tab with the matching drawer (Detection or Response) already open.
Troubleshooting: Sign-in Failed
If you click your invite link and see a Sign In Failed page, it’s almost always because:- You aren’t a Global Administrator and ContraForce hasn’t been pre-approved for your tenant yet
- A previous sign-in attempt got into a bad state
What to do
If you're a Global Admin, click Try Again
Sign in. Microsoft will show the consent screen. Accept it, and you’ll proceed into the wizard.
Next Steps
Command Dashboard
Your home base for incident triage across your environment
Incident Management
How to triage, investigate, and respond to incidents
What Are Gamebooks?
Automated response workflows you can run from any incident
Workbench Overview
The investigation command center
Need help? Contact us at support@contraforce.com.