This guide walks you through getting your service-provider organization up and running on ContraForce. By the end, you’ll be ready to pre-onboard your first customer.Documentation Index
Fetch the complete documentation index at: https://docs.contraforce.com/llms.txt
Use this file to discover all available pages before exploring further.
Who is this for?
- MSP/MSSP partners setting up your parent tenant before onboarding customers
- Internal security teams deploying ContraForce for your own organization
Prerequisites
| Requirement | Why |
|---|---|
| Microsoft Entra Global Administrator | Required the very first time anyone from your tenant signs in, to grant ContraForce permission to read security data |
| ContraForce sign-up link | Provided by your account team |
Pop-ups allowed for portal.contraforce.com | Microsoft consent prompts open in popup windows |
Step 1: Grant ContraForce Access to Your Tenant
Before anyone in your organization can sign in, a Microsoft Entra Global Administrator has to grant ContraForce permission to read security data from your tenant. This is a one-time approval.Sign in with Microsoft
You’ll be redirected to Microsoft. Sign in with your Global Admin credentials.
Review the requested permissions
Microsoft displays a consent screen listing the permissions ContraForce needs. Review the list and click Next.

Step 2: Sign In for the First Time
Once consent is granted, create a workspace for your organization.

Step 3: The Get Started Checklist
The Get started with ContraForce panel is your home base for setup. It lists the activities your organization still needs to complete.| Item | What it does |
|---|---|
| Create your account | Already done by signing in for the first time |
| Setup agent center | Choose where ContraForce-hosted automation runs |
| Connect sources | Connect your own security tools so your SOC team can use ContraForce internally |
| Add customer workspaces | Pre-onboard the customers you’ll be managing |
Step 4: Set Up Your Agent Center
Click Start next to Setup agent center. This is where you choose how the ContraForce automation engine runs for your organization.
Agent Center Deployment Reference
Detailed Agent Center setup, requirements, and configuration options
Step 5: Connect Detection Sources to Your Own Workspace
Click Start next to Connect sources. This jumps you straight to the detection-source picker for your own workspace.
Connecting Microsoft Sentinel triggers ContraForce to deploy the supporting Azure infrastructure in your subscription automatically. You don’t need a separate Azure deployment step. Provisioning runs in the background after you grant consent.
Step 6: Add a Customer Workspace
Click Start next to Add customer workspaces. You’ll land on the Workspace Center with the Onboarding tab active and the Add workspace rail panel already open on the right.
| Field | Description |
|---|---|
| Workspace name | Friendly label you’ll use to refer to this customer |
| Tenant ID | The customer’s Microsoft Entra tenant ID |
| Primary point-of-contact email | The customer admin who will complete the wizard on their side |
| Detection modules | Pre-select the security tools the customer is bringing |
| Response modules | Pre-select the response capabilities the customer will use |


Customer Workspace Onboarding
What your customer sees on their side after they receive the invite email
Troubleshooting: Sign-in Failed
If a teammate sees the Sign In Failed page after trying to log in, it usually means one of three things:- The Microsoft admin consent step was skipped
- A non-admin user tried to sign in before consent was granted
- A previous sign-in session is stuck

What to do, in order
Click Return to the application without granting consent
This bounces you back to a clean state without applying a half-completed consent.
Send the admin consent link to your admin
Copy the admin consent link from the page and forward it to your Global Admin.

Have your admin complete the consent flow
Your admin clicks the link, signs in as a Global Administrator, and walks through the Microsoft consent prompts.



Wait until your admin reaches the Permissions Approved card before you try again.




Next Steps
User & Group Management
Set up groups before onboarding customers
Customer Workspace Onboarding
What your customer sees on their side
Multi-Tenant Features
Manage multiple customers efficiently
Roles & Permissions Reference
Plan role assignments for your team
Questions about platform onboarding? Contact us at support@contraforce.com.


