Skip to main content
Inforcer manages your clients’ Microsoft 365 tenants against your baselines. Connect it once with an API key from your Inforcer account, and Neo agents can work with every client tenant in it.

​
What Neo can do with Inforcer

  • Report a client’s Microsoft Secure Score, its trend over 90 days, and the improvement actions worth the most points
  • Show how far a client drifts from your baseline, and which policies differ
  • Run Inforcer reports for a client and sum them up for a quarterly business review, or attach Inforcer’s PDF to the ticket
  • Check how a client’s Conditional Access, Intune or Exchange policy is set, and find users without MFA or with admin roles
  • Run an Inforcer assessment for a client and summarize what fails

​
Each ticket stays with its client

One Inforcer key reaches every client tenant in your account. On a ticket that names a company, Neo sends a call only for the Inforcer tenant the ticket’s company is mapped to. Reads across every client, such as all alignment scores, go out only when the run has no ticket company: a chat with Neo, or a scheduled agent.

​
Your tenants are mapped to companies

Neo matches your Inforcer tenants to the companies in your PSA and keeps the mapping on the Inforcer card’s Organization Mapping tab, refreshed on each PSA metadata sync. Matching first uses the Microsoft tenant ID: an Inforcer tenant whose Microsoft tenant ID is the one Neo holds for a company is matched to it. Then it uses the tenant name: exact, then after stripping a legal-form suffix (Ltd, Inc, LLC). Last comes an AI match for the long tail. A Microsoft tenant ID match, a name that matches exactly one of your PSA companies, as it is or after stripping a legal-form suffix, and a match you confirm are handed straight to your agents. A name two of your PSA companies share, or a name that matches a company another Inforcer tenant already matches, is left to the AI match, and an AI match waits for you on the Organization Mapping tab. Confirm or correct each there. Anything Neo could not match stays unmapped and visible on the same tab, where you can set the right company by hand. A mapping you set by hand survives every later sync. See Inforcer API for the permission groups.

​
Next steps

Connect Inforcer

Create an API key and save it in Neo.