> ## Documentation Index
> Fetch the complete documentation index at: https://university.triggr-app.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Keeper MSP

> Connect Keeper's MSP Vendor API to Triggr to manage MSP accounts and read their usage.

Triggr works with the Keeper MSP accounts linked to your partner account: creating trials, converting, cancelling, reactivating and removing accounts, and reading usage and products. To manage users and teams inside a Keeper tenant, use [Keeper SCIM](/integrations/keeper/scim) instead.

## Set up Keeper MSP

<Steps>
  <Step title="Request API access">
    Ask Keeper support or your Keeper representative for access to the MSP Vendor (Account Management) API, which Keeper offers to distributors of Keeper MSP accounts.
  </Step>

  <Step title="Collect your credentials">
    Keeper shares a record with your Partner name, Partner key (`consumer.key`) and Pre-shared secret (`secret.key`). Check which Keeper region your partner account is in.
  </Step>
</Steps>

See Keeper's [Account Management APIs](https://docs.keeper.io/enterprise-guide/keeper-msp/account-management-apis).

## Connect it in Triggr

<Steps>
  <Step title="Open the integration">
    Go to **Integrations > Keeper MSP** and click Configure on the Base Configuration card.

    <Frame>
      <img src="https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/base-configuration.png?fit=max&auto=format&n=nyuVXZ1rouDTTEvu&q=85&s=bb81acb082055015f91beda7b4876f35" alt="The Base Configuration card with Status Not Configured, Admin Consent Not Required and a Configure button." width="2272" height="330" data-path="images/integrations-common/base-configuration.png" />
    </Frame>
  </Step>

  <Step title="Enter your partner credentials">
    Select your Region host (`keepersecurity.com` for the US, or `keepersecurity.eu`, `keepersecurity.com.au`, `keepersecurity.ca`, `keepersecurity.jp` or `govcloud.keepersecurity.us`), enter the Partner Key, Partner Name and Pre-shared Secret, then click Save Configuration.

    <Frame>
      <img src="https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/keeper-msp/configure.png?fit=max&auto=format&n=nyuVXZ1rouDTTEvu&q=85&s=fc577b2be028fcf59f9b82d76ca2b751" alt="The Keeper MSP configuration window with a Region host dropdown, Partner Key, Partner Name and Pre-shared Secret fields, an Allow insecure TLS switch under Advanced, and a Save Configuration button." width="1344" height="1614" data-path="images/keeper-msp/configure.png" />
    </Frame>
  </Step>
</Steps>

One connection covers every MSP account linked to your partner account. Actions take Keeper's JSON body and identify an account by `vendorInternalId` (the ID you give it at creation) or `partnerId`, for example `{"vendorInternalId": "acme-001"}`. Keeper's documentation has the full request schemas.

## Account statuses

| Status | Meaning |
| - | - |
| `PENDING` | Created with Create Trial Account; invitation not yet accepted. |
| `TRIAL` | On Keeper's 14-day trial. Keeper deactivates it if it isn't converted to paid; it can be reactivated while Keeper holds its data (one year). |
| `ACTIVE` | Paid. |
| `EXPIRED` | Cancelled with Cancel Paid Account. Billing stops straight away. |
| `REGION_CONFLICT` | Activated in another Keeper region; see `accountRegion`. |
| `PRODUCT_CONFLICT` | Activated as another Keeper product; see `productType`. |

## Troubleshooting

<AccordionGroup>
  <Accordion title="Every action fails with 401">
    Check Partner Key, Partner Name and Pre-shared Secret match the Keeper record exactly, and Region host is your partner account's region.
  </Accordion>

  <Accordion title="An account shows REGION_CONFLICT or PRODUCT_CONFLICT">
    The customer activated an account without the invitation link. Remove Account deletes accounts that are pending or in conflict.
  </Accordion>
</AccordionGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.