LogoLogo
Get CIPPJoin Discord
  • ☕CIPP Documentation
  • 🦸Setup
    • Self Hosting Guide
      • Prerequisites
      • Installation
      • Run From Package Mode
      • Post-Install Configuration
      • Configuring Automatic Updates
      • Updating Versions
      • Migrating to Hosted CIPP
      • Self-hosted API Setup
    • Service Account Setup
      • GDAP's Importance in CIPP
      • Creating the CIPP Service Account
      • Conditional Access best practices
      • Recommended Roles
    • Configuring CIPP
      • Adding users to CIPP
      • Executing the SAM Setup Wizard
      • Tenant Onboarding
      • Adding Tenants & Consenting the CIPP-SAM Application
      • User Roles in CIPP
      • Adding a custom domain name
      • I want to manage my own tenant
    • Implementing CIPP
      • Recommended First Steps
      • Standards Setup
    • Resources
      • Professional Onboarding Services
      • Sponsor Quick Start
  • 🙋User Documentation
    • Shared Features
      • Menu Bar
        • Tenant Select
        • Display Mode
        • 🔍Search
        • Bookmarks
        • User Preferences
      • Table Features
      • Speed Dial
      • Keyboard Shortcuts
    • CIPP Dashboard
    • Identity Management
      • Administration
        • Users
          • Bulk Add
          • Invite Guest
          • Add User
          • View Individual User
            • Edit User
            • Exchange Settings
            • Compromise Remediation
            • Conditional Access
        • Risky Users
        • Groups
          • Add Group
          • Edit Group
        • Group Templates
          • Add Group Template
          • Deploy Group Templates
        • Devices
        • Deleted items
        • Roles
        • JIT Admin
          • Add JIT Admin
        • Offboarding Wizard
      • Reports
        • MFA Report
        • Inactive Users
        • Sign Ins Report
        • AAD Connect Report
        • Risk Detections
    • Tenant Administration
      • Administration
        • Tenants
          • Edit Tenant
          • Tenant Groups
            • Add Tenant Group
            • Edit Tenant Group
        • Alert Configuration
          • Add Alert
        • Audit Logs
        • Enterprise Applications
        • Secure Score
        • App Consent Requests
        • Authentication Methods
        • Partner Relationships
      • GDAP Management
        • Relationships
          • Relationship Summary
            • Role Mappings
        • Role Mappings
          • Map GDAP Roles
        • Role Templates
          • Add Template
        • Invites
          • New Invite
        • Onboarding
        • Offboarding
      • Configuration Backup
        • Backups
          • Restore Configuration Backup
          • Add Configuration Backup
      • Standards
        • List Standards Templates
        • Add Standards Template
        • Compare Tenant to Standard
        • Best Practice Analyser
          • Best Practice Templates
          • Custom Reports
        • Domains Analyser
      • Conditional Access
        • CA Policies
          • Deploy CA Policies
        • CA Vacation Mode
          • Add Vacation Schedule
        • CA Templates
        • Named Locations
          • Add Named Locations
      • Reports
        • License Report
        • Sherweb License Report
          • Add Subscription
        • Consented Applications
    • Security & Compliance
      • Incidents & Alerts
        • Incidents
        • Alerts
      • Defender
        • Defender Status
        • Defender Deployment
        • Vulnerabilities
      • Reports
        • Device Compliance
    • Intune
      • Applications
        • Applications
          • Add Application
            • Add MSP App
            • Add Store App
            • Add Choco App
            • Add Office App
        • Application Queue
      • Autopilot
        • Autopilot Devices
        • Add Autopilot Device
        • Profiles
        • Add Profile
        • Status Pages
        • Add Status Page
      • Device Management
        • Devices
        • Configuration Policies
        • Compliance Policies
        • Protection Policies
        • Apply Policy
        • Policy Templates
        • Scripts
      • Reports
        • Analytics Device Score
    • Teams & SharePoint
      • OneDrive
      • SharePoint
        • Add Site
        • Bulk Add Site
      • Teams
        • Teams
          • Add Team
        • Teams Activity
        • Business Voice
    • Email & Exchange
      • Administration
        • Mailboxes
          • Add Shared Mailbox
        • Deleted Mailboxes
        • Mailbox Rules
        • Contacts
          • Add Contact
          • Edit Contact
        • Quarantine
        • Tenant Allow/Block Lists
          • Add Entry
      • Transport
        • Transport rules
          • Deploy Template
        • Transport Templates
        • Connectors
          • Deploy connector Templates
        • Connector Templates
      • Spamfilter
        • Spamfilter
          • Deploy Spamfilter
        • Spamfilter Templates
        • Connection filter
          • Deploy Connection Filter
        • Connection filter templates
      • Tools
        • Mailbox Restore Wizard
        • Mail Test
      • Resource Management
        • Rooms
          • Add Room
          • Edit Room
        • Room Lists
      • Reports
        • Mailbox Statistics
        • Mailbox Client Access Settings
        • Anti-Phishing Filters
        • Malware Filters
        • Safe Link Filters
        • Safe Attachment Filters
        • Shared Mailbox with Enabled Account
        • Global Address List
    • Tools
      • Tenant Tools
        • Graph Explorer
        • Application Approval
        • Tenant Lookup
        • IP Database
        • Individual Domain Check
      • Email Tools
        • Message Trace
        • Mailbox Restores
        • Message Viewer
      • Dark Web Tools
        • Tenant Breach Lookup
        • Breach Lookup
      • Template Library
      • Community Repositories
        • View Repository Templates
      • Scheduler
        • Add Job
    • CIPP
      • Application Settings
        • Permissions
        • Tenants
        • Backend
        • Notifications
        • Partner Webhooks
        • Licenses
        • CIPP Backup
        • Global Variables
      • Logbook
      • SAM Setup Wizard
      • Integrations
        • Integration Sync
        • CIPP-API
        • Sherweb
        • Gradient
        • Halo PSA Ticketing
        • NinjaOne
        • Hudu
        • Password Pusher
        • Have I Been Pwned?
        • Cloudflare
        • GitHub
      • Custom Data
        • Directory Extensions
          • Add Directory Extension
        • Schema Extensions
          • Add Schema Extension
        • Mappings
          • Add Mapping
          • Edit Mapping
      • Advanced
        • Super Admin
          • Tenant Mode
          • Function Offloading
          • Custom Roles
          • SAM App Roles
          • SAM App Permissions
        • Exchange Cmdlets
        • Timers
        • Table Maintenance
  • 📂Troubleshooting
    • Error codes
    • Troubleshooting instructions
      • Refreshing a Specific Tenant's Permissions via CPV API
    • Frequently Asked Questions
      • I got a "Potential Phishing page detected" alert. What do I do with that?
  • 🔐Security
    • CIPP Security and Compliance
      • Security Policy
      • Security reports
    • CIPP Community Vulnerability Disclosure Policy
  • 👩‍💻👩💻 Dev Documentation
    • CIPP Dev Guide
      • Setting Up for Local Development
      • Executing Local Development
      • Project Structure
      • Development Tips
      • CIPP v7 Developer Brief
    • Contributing to the Code
    • Contributing to the Documentation
  • ⚙️API Documentation
    • Setup & Authentication
    • Endpoints
  • 🧰MSP Adoption Toolkit
    • Building a CIPP Business Case
  • ☕Sip & CIPP
    • Conditional Access
    • Autopilot & Intune
  • CIPP New Interface Release Candidate 2 (rc2)
Powered by GitBook
On this page
  • Overview
  • Key Features
  • License Management
  • Setting Up the Integration
  • Prerequisites
  • Getting Your API Credentials
  • Configuration Steps
  • Mapping Your Tenants
  • Automated Migrations
  • Scheduled license removal/additions

Was this helpful?

Edit on GitHub
Export as PDF
  1. User Documentation
  2. CIPP
  3. Integrations

Sherweb

PreviousCIPP-APINextGradient

Last updated 29 days ago

Was this helpful?

New to Sherweb? Visit

Overview

The Sherweb integration enables you to manage your Microsoft 365 licenses and subscriptions directly within CIPP. This means you can handle all your licensing needs from one place, making it easier to manage users and their licenses across your organization.

Key Features

License Management

  • Purchase new licenses when adding users

  • Increase or decrease license quantities as needed

  • Automatic license handling during user creation and removal

  • Monitor license usage through CIPP's reporting

  • Perform bulk license changes across multiple users

Setting Up the Integration

Prerequisites

You should have an active Sherweb partner account, and access to the Cumulus portal. You'll need to enable API access and collect three pieces of information from Sherweb.

Getting Your API Credentials

  1. Go to the SherWeb Cumulus Portal and log in to your account: https://cumulus.sherweb.com/partners/cippcumulus/security/apis

  2. Create a new application (you can name it "CIPP")

  3. Copy the below three keys and store them securely (password manager, IT documentation, etc.)

    • Client ID: This is a unique identifier for your application within Sherweb.

    • Subscription Key: This key is used to access the Sherweb API.

    • Client Secret (API Key): This is a secret key used for authenticating your application.

Configuration Steps

If you're self-hosted, ensure that your deployed instance of CIPP is running version 7 or later, as that is required for access to this integration.

  1. Navigate to CIPP > Integrations

  2. Find and click on the Sherweb card

  3. Enable the integration using the toggle switch

  4. Enter API Credentials from your Sherweb Cumulus Account in the relevant fields.

  5. Custom Roles for License Purchase: (Optional)

  6. Save Configuration: Ensure that you save the configuration by pressing Submit.

Mapping Your Tenants

To connect your Microsoft 365 tenants with their Sherweb accounts, you'll need to map them together. This tells CIPP which Sherweb customer account corresponds to each tenant.

Always review the matches before saving to ensure accuracy.

Automated Mapping:

  1. Click "Automap SherWeb Organizations" to automatically match tenants

  2. The system attempts to match based on:

    • Exact name matches between CIPP tenants and SherWeb customers

    • Similar name patterns

    • Domain information when available

  3. Review the automated matches in the mapping table

  4. Make any necessary manual adjustments

  5. Click Save Mappings to finalize the mappings

Manual Mapping:

  1. Select a tenant from the dropdown

  2. Select the corresponding SherWeb organization

  3. Click the + button to add the mapping

  4. Repeat for additional tenants

  5. Click Save Mappings to finalize

Automated Migrations

The Automated Migrations feature allows MSPs to identify, plan, and optionally execute license migrations from legacy CSPs to Sherweb through a scripted automation pipeline. This functionality is built around a flexible migration strategy, giving MSPs control over whether to just notify, purchase, or cancel legacy subscriptions — all based on real-time license matching.

What It Does

The migration function analyzes licenses that are:

  • Within a transferable window (<= 7 days remaining),

  • Active under a non-Sherweb CSP,

  • And compares them with the licenses currently available at Sherweb.

Depending on the configured method, the script will either:

  • Notify the MSP of required license migrations via email, PSA, and webhook alerts,

  • Automatically purchase matching licenses from Sherweb,

  • Or cancel the old subscriptions entirely.\

Matching is currently done based on subscription and SKUIds, these will be improved in the future when Sherweb supplies more information about SKUs. If any part of the process fails you will automatically receive an email with the latest status.

Automated migration setup

  1. Toggle “Enable automated migration to Sherweb”

    • This activates the automated migration system

    • Additional options will appear based on your selections

  2. Choose a Migration Strategy

    • Under “Select how you'd like automated migrations to be handled”, pick one:

      • Notify only — Get alerts when subscriptions are eligible for migration (but take no action)

      • Buy and notify — Automatically purchase the matching license from Sherweb, and notify

      • Buy and cancel — Automatically purchase Sherweb licenses and cancel the old CSP license

  3. (Optional) Select Vendor to Migrate From

    • This option appears if you chose Buy and cancel

    • Currently supports:

      • Pax8

  4. (Optional) Set License Type to Migrate To

    • If you selected any method containing Buy, select:

      • Yearly (Y1Y)

      • Annual paid monthly (M1Y)

      • Monthly (M2M)

  5. (If migrating from Pax8) Enter Pax8 API Credentials:

    • Pax8 Client ID

    • Pax8 Client Secret

We recommend to only enable automated migrations after extensive testing - please set your automated migration strategy to "Notify" for atleast one month before executing automated buys. Neither Sherweb nor CyberDrain is responsible for purchaces made through the API.


🔔 What Happens Next?

Once enabled:

  • CIPP will monitor tenants for licenses nearing their transfer window.

  • Based on your migration strategy:

    • You’ll receive alerts via email, PSA, or webhook

    • Licenses may be automatically purchased

    • Legacy subscriptions may be canceled via Pax8's API (if configured)

Scheduled license removal/additions

Using the task scheduler you can add/remove licenses now, this allows you to easily add/decrease the amount of licenses assigned to a tenant. To create a scheduled task for this do the following:

  • Go to Tools -> Scheduler.

  • In the scheduler click on Add Job

  • Select the option "Set-CIPPSherwebLicense"

  • Choose the options you'd like to use, such as adding a license, removing, or changing the quantity.

  • Choose the dates, and click on "Add Schedule"


If required, use the autocomplete field to select allowed to purchase licenses. This allows you to specify which CIPP users with particular roles can use the purchase licenses functionality on the onboarding wizards & report pages.

🙋
SherWeb Cloud Services for MSPs
custom roles

Feature Requests / Ideas

We value your feedback and ideas. Please raise any on GitHub.

feature requests