Triggering Mail Campaigns From Opportunities

This guide will cover: – Automatically Adding Opportunity Contacts to Distribution Lists – Triggering A Mail Campaign From An Opportunity Setting The End Of A Mail Campaign To Update The Relevant Opportunity With the dynamic members list functionality within distribution lists, you are able to have users and prospects added and removed from your distribution […]

Splunk On Call Integration

In this guide we will cover: – What is the Splunk On Call Integration? – Connecting to Splunk On Call  – Configuring and Integrating Splunk On Call – Creating Splunk On Call Webhooks What is the Splunk On Call Integration? Splunk on Call is an incident management platform designed to help teams respond quickly to problems […]

X.509 for encryption

Passwords and secrets are encrypted with an X.509 certificate built into the app by default. It is reccomended to use your own self-signed X.509 certificate for encryption. Generate a self-signed certificate First, you need to generate a self-signed certificate to use for encryption. If you have not done this before, you can download a free […]

Protect token signing keys with a certificate

When authenticating in Halo, access tokens are signed with a key. We recommend encrypting this key with an X.509 certificate. Generate a self-signed certificate First, you need to generate a self-signed certificate to use for encryption. If you have not done this before, you can download a free tool to do this for you here; […]

Read-only connection for reports

Prevent abuse of the report builder by ensuring a database connection with read-only privileges is used for SQL reports. Create a SQL user with read-only access to the Halo database Create a new SQL user account in SQL Server Management Studio by going to Security > Logins, right-click on Logins and select New Login. Use […]

Enabling Secure Cookies in the Web Application

Enable secure cookies to stop cookies from being sent over HTTP. This is not enabled by default as it makes the application unusable over HTTP. Before enabling ensure an upgrade from HTTP to HTTPS is enabled as the app will no longer function over HTTP. Add the following property into the 3 appsettings.json files at […]

Enable HTTP strict transport security (HSTS)

This ensures all traffic to the Halo site can only use a secure HTTPS connection. HTTPS must already be configured for the web application. Currently, these steps are required after any upgrade. If HTTPS/SSL is not configured, and HSTS is enabled, the application will not work. Open web.config in the root of your Halo web […]

Http to Https redirect in web app

How to get http to redirect to https in the web app. Open appsettings.json in the root folder (not api or auth). Add "httpsonly":true like in the below; Restart the site. Now when browsing to the http version it will be replaced with the https version.

CORS Policy on Halo API

By default, the CORS policy on all Halo web apps is a wildcard that allows all. To enable a stricter CORS policy to block requests from other origins, follow the below. In appsettings.json in the API and Auth Server add "UseCorsPolicy": true. Also, add "CorsWhiteList" as an array of strings. Enter the hostname of each […]

Agreements (Contracts)

Configuration > Agreements Check out the Academy guides on our Support Portal, which can also be found on the HaloPSA Academy: An Introduction to Billing HaloPSA Academy – An Introduction to Billing Within the Billing Course of the Support Portal, you will find sections on Creating Invoices, Labour Billing and Recurring Invoices. Agreements that are active […]