IT services
Microsoft 365 and Teams for MSPs, tied to the ticket
OKTO PSA starts Microsoft 365 arrivals and departures from a ticket or from the client portal. At departure the account is blocked, never deleted, then checked again 15 minutes later, at 1 hour and at 4 hours. This part is offered to IT providers, on request. Teams meetings and calls attach to tickets.
Here is what ships, what depends on a request to our team, and what does not exist: a Teams bot that alerts your technicians.
What does OKTO PSA do with Microsoft 365 and Teams?
It handles your clients’ employee arrivals and departures from the ticket, shows you at-risk users, and ties Teams meetings and calls to the right ticket. Every action leaves a trace in the client’s file, in the same place as the rest of your work.
When an employee leaves, the Microsoft 365 account is blocked, never deleted, and OKTO PSA checks the block again 15 minutes later, at 1 hour and at 4 hours.
Is it included in every instance?
No, and you should know that before you plan around it. Microsoft 365 security and the arrival and departure workflows rely on an engine that is not included by default in an OKTO PSA instance. It is offered to IT providers, on request.
What ships, and what depends on a request
The rest of the platform (tickets, contracts, billing, portal) works without that engine. To get it, write to us: we connect it to your service company’s instance, together with you.
- On request: Microsoft 365 arrivals and departures, Microsoft 365 Security screen.
- Administrator setting: Teams meetings to Approvals, call log (switches are off by default).
- Not available: a Teams bot that alerts technicians, ticket notices pushed into a Teams channel.
What does an employee departure look like?
The departure starts from a ticket, or the client requests it in their portal. A scheduled departure can also be cancelled by the client until it has happened.
The request comes in
A technician starts the departure from the ticket, or the client submits it in the portal. Either way, the request lands in the file.
The account is blocked
Sign-in is blocked and the account stays in place. Nothing is deleted: the mailbox, the files and the history remain recoverable if the client changes their mind or needs to pick up a file.
OKTO PSA checks again
Fifteen minutes later it reads the account state to confirm the block holds. If not, it retries at 1 hour, then at 4 hours.
You are notified if it fails
If the block still does not hold after the three checks, a notice tells you. You take over instead of finding the problem a month later.
An automatic scheduled departure also exists, on the date the client set. It is off by default: the administrator of your instance turns it on.
Why block instead of delete?
Because an account deleted by mistake costs a day of work, and a blocked account reopens in a minute. Blocking cuts access right away. Heavier decisions, such as the final deletion or what happens to a mailbox, come afterward, with the client’s agreement.
Wrong person
A misspelled name in a departure request destroys nothing. You fix it and unblock.
Files to pick up
Whoever replaces an employee often needs the last few months of email. The account is still there.
The full checklist for a clean departure (sessions, password, licences, OneDrive, devices) is in the Microsoft 365 onboarding and offboarding guide.
And employee arrivals?
Same path: a ticket, or a client request in the portal. The client knows better than you when someone starts, so the client tells you, and the request drops into your queue with everything they filled in.
This page does not promise a specific list of licences or groups applied on arrival. What an arrival creates depends on what we set up with you for each client, and we confirm it before connecting the engine.
What is the Microsoft 365 Security screen for?
It lists at-risk users across your clients, with a record for each one. OKTHAV, the OKTO PSA AI assistant, adds a written notice to the record. You decide what happens next: nothing fixes itself.
One record per user
The client, the person and what puts them at risk read in one place.
A notice from OKTHAV
The assistant summarizes the situation from the company’s own data. It suggests, you decide.
What happens with Teams meetings and calls?
After a Teams meeting with a client, a proposal waits in Approvals: a ticket, a note and a time entry. You approve, or you do nothing. Nothing is logged or billed without your approval.
Meetings to Approvals
A one-hour quarterly review no longer gets lost: the proposed time is ready to approve. It is a switch, off by default.
Call log
A Teams call button, and the call is added to the ticket thread with its duration. Also a switch.
Missed call
The “Open a ticket” button turns a missed call into a request to handle, without retyping the number.
Both options go through your Microsoft 365 account and are set up before use. There is no bot announcing tickets in a Teams channel: that feature does not exist.
What kind of IT provider benefits most?
One that manages dozens of Microsoft 365 tenants and gets departures every month. The more there are, the more the re-check matters: a block forgotten on a former employee is the kind of detail a client finds during an audit.
When you do not need it
A provider that handles two departures a year does them fine by hand, with a checklist. In that case the engine adds little, and you can simply use OKTO PSA for tickets, contracts and billing. We say so because a feature offered on request should serve someone, not just sit on a list.
What stays on your side
The decision about a former employee’s mailbox, licences and files remains yours and the client’s. OKTO PSA blocks, re-checks and notifies you. It does not replace the conversation about what to keep.
Frequent questions
The questions we get asked
Your question is not here?
Write to us. A person in Trois-Rivières answers, within one business day.
Ask your questionThe departure starts from a ticket or from the client’s request in the portal. OKTO PSA blocks the account without deleting it, then re-checks the block after 15 minutes, 1 hour and 4 hours. You get a notice if it fails.
A block cuts access right away and can be undone in a minute. A deletion by mistake costs a day of work. Decisions about the mailbox, licences and files come afterward, with the client.
No. Microsoft 365 security and the arrival and departure workflows rely on an engine offered to IT providers, on request. The rest of OKTO PSA works without it.
A Teams meeting with a client produces a proposed ticket, note and time entry in Approvals. The call log adds a call button and attaches the call to the ticket. Both options are off by default.
No. There is no Teams bot alerting technicians and no ticket notices pushed into a channel. Teams meetings and calls are tied to tickets, and that is all.
No. Nothing is logged or billed without your approval in the Approvals screen.
Ask for the Microsoft 365 engine
Tell us how many clients and departures you handle each month. We will explain what connects and at what pace.
OKTO Solutions, Trois-Rivières, Quebec