Datto Integration

Table of Contents

Enabling the Datto RMM Integration | Deployment | Datto PSA | Company Mapping | Contract Mapping | Ticket Settings | Troubleshooting

The following article will cover setting up integration for Datto PSA and Datto RMM using ThreatLocker. 

ThreatLocker has created an interface in which you can integrate your Datto and ThreatLocker accounts easily. 

Prior to setting up this integration, please use the following instructions to ensure that these settings are configured in Datto PSA:

• To start, sign in to your Autotask account. 

 

 

 

Enabling the Datto RMM Integration 

To enable your Datto RMM Integration, navigate to the ‘Integrations’ page in the ThreatLocker portal using the left-hand side of the page. 

 

Within the ‘Integrations’ page, use the search field to input ‘datto’ and select it once it displays in the dropdown. 

 

A side panel titled ‘Add Datto Integration’ will now appear. 

 

Select the checkbox to the left of ‘Enabled’ under Datto RMM. In this section, you must select your RMM Zone, enter your API Key, and enter your API Secret Key. 

 

An API Key and API Secret Key must be generated for each user. For more information on how to retrieve this, please consult the following documentation from Datto: 

Datto RMM API 

After entering these credentials, select the ‘Create’ button at the bottom of the page. 

Once credentials have been successfully validated, you will obtain access to the Deployment Tab. 

Deployment

The ‘Deployment’ tab will now appear on the page to the right of ‘Datto Settings.’ Select this tab. 

 

From here, ThreatLocker will populate all sites associated with the account credentials you entered. Use the dropdown menu to select the site(s) you want to include in your integration. Under this, you will also choose the component to include. The list comprises only the components with the keyword ‘ThreatLocker’.

Note: The 'Component' dropdown is case sensitive. Your component must be named 'ThreatLocker', ensuring the 'T' and 'L' are capitalized.

 

Once this has been filled out, you can also check the ‘Auto Push’ box underneath. Enabling Auto Push will ensure that the component is deployed to all devices in the selected RMM sites, on a recurring schedule, once daily. 

Selecting Push will deploy the selected component to all devices under the checked RMM Sites. 

 

For further information on deploying ThreatLocker using Datto RMM's components, please consult the following article: 

Deploying ThreatLocker with a datto RMM Component | ThreatLocker Help Center 

Datto PSA 

To enable your Datto PSA Integration, navigate to the ‘Integrations’ page in the ThreatLocker portal using the left-hand side of the page. 

 

Within the ‘Integrations’ page, use the search field to search for ‘datto’ and select it once it displays in the dropdown. 

 

A side panel titled ‘Add Datto Integration’ will now appear. 

 

Select the checkbox to the left of ‘Enabled’ under Datto PSA. You will be prompted to input your Datto PSA API User Credentials. 

 

Once credentials have been entered, select the 'Save’ button at the bottom of the page. This will save and validate your credentials. Once credentials have been validated, you will receive the ‘Company Mapping’ and ‘Ticket Settings’ tabs. 

Company Mapping 

Navigating to the ‘Company Mapping’ tab, you will now see two fields for PSA Client and Organization. The PSA Client dropdown will populate with accounts found in your Datto PSA account with the ‘Customer’ Account Type. 

Note: If the account does not have the ‘Customer’ Account Type, it will not appear here. 

 

In the ‘Organization’ field, enter the name of the ThreatLocker organization you would like to map this PSA Client account to. 

 

Select the ‘+’ button to add this company map. It will then appear underneath the field. 

 

Successfully mapping clients from your Datto PSA to ThreatLocker is required to set up your Contract Mapping and Ticket Settings. 

Contract Mapping 

The Contract Mapping tab will ONLY appear after a company has been mapped. With this tab, you will be able to view contracts that are applied to your PSA client and implement them here. 

Using the ‘PSA Client’ dropdown, select the client name. The list will then populate with all mapped companies from the Company Mapping tab. 

Next, using the ‘PSA Contract’ dropdown, select the contract you would like to map. ThreatLocker will be able to view all contracts that are associated with the chosen client. 

 

Lastly, select your PSA Service/Bundle. This information is chosen during contract creation and will populate based on the selected contract. 

 

Once you have entered this information, select the ‘+’ button to finalize your mapping. The entered information will populate underneath the fields. 

 

Ticket Settings 

The Ticket Settings tab allows you to select how tickets from ThreatLocker appear in your Datto PSA account. Navigating to the Ticket Settings tab, you will see different fields with dropdown menus. 

 

Once you have selected all your settings, choose ‘Save’ at the bottom of the page. 

These options correlate with Datto PSA’s ticketing system. Whenever a user from a mapped organization submits an approval request, a ticket will be generated in Datto PSA matching the settings you input in the provided fields. 

Note: Tickets related to approval requests that have been resolved on ThreatLocker will automatically change the status to ‘Approved’. 

Troubleshooting  

• No components are listed in the dropdown menu of the Deployment section. 

• No clients are listed in the ‘PSA Client’ dropdown in the ‘Company Mapping’ tab.