Settings

Email intake needs a one-time DNS setup so mail can reach the desk:

1. In Cloudflare, enable Email Routing for a subdomain (e.g. inbound.yourkeytoit.com) and add the records it gives you.
2. Create the Email Worker from docs/email-to-ticket-worker.js and set its INBOUND_URL and INBOUND_SECRET secrets.
3. Route desk-* mail to that Worker.

Until that's in place, the address above is reserved but won't receive mail yet.

1. Click Generate monitoring token above and copy the ykti_mon_… value. It is shown once — if you lose it, generate a new one (which replaces the old).
2. In your monitoring tool, add an outgoing webhook (HTTP POST) to the Webhook URL above.
3. Add a request header named x-org-token set to your monitoring token. Send it as a header, not in the URL, so it isn't written to logs.
4. Send the alert body as JSON. Common fields are auto-detected (node/host, severity, message, alert); anything else is preserved on the ticket.

Severity maps to ticket priority automatically (critical → urgent, warning → medium, and so on). Generating a new token immediately disables the previous one.

Claiming a domain routes those users into your org, but the actual Microsoft sign-in must be connected once at the platform level:

1. Register an Enterprise Application (SAML) in Microsoft Entra ID.
2. Enable SAML SSO on the yourKEYtoIT backend and register your Entra metadata for this domain.

Full steps are in docs/sso-setup.md. Until that's done, the “Sign in with your organization” button will say SSO isn't set up for your domain.