How Onboarding Works
PanOps onboarding is a guided, structured process conducted as a live video session in-person that typically takes between 1 to 3 hours with a PanOps team member. The session covers all connector authorizations, employee enrollment initiation, and CEO access configuration in a single sitting.
No software is installed on any employee device. No changes are made to existing infrastructure. Every integration is established through standard OAuth flows in the PanOps Onboarding Portal — the same authorization mechanism used by any third-party productivity app.
Before the Onboarding Session
A pre-onboarding IT checklist is sent to the customer administrator 5–7 business days before the session. This gives IT teams adequate lead time to clear the most common enterprise blockers before the call — ensuring the onboarding session is spent connecting, not troubleshooting.
- Azure AD conditional access policy — add PanOps to approved third-party apps
- Google Workspace app approval — allow PanOps OAuth domain-wide consent
- Zoom app approval — allow PanOps in Zoom Marketplace app management
- Cloud recording policy — confirm org-wide cloud recording is enabled (Teams, Zoom, Google Meet)
- Admin role confirmation — identify who holds Global Admin, Super Admin, and Zoom Admin roles
- Employee roster — customer to provide employee roster by name, location, role, and department, with all connected identifiers (i.e., email address and any platform-specific usernames)
The Onboarding Session
Employee Enrollment
Employee enrollment is separate from connector authorization and does not require IT involvement. After the onboarding session, each employee receives a unique enrollment link via the customer administrator's distribution method of choice (Enterprise email recommended).
The enrollment page is a mobile web experience. It takes under 2 minutes per employee and requires no app download. Each employee reviews the data consent disclosure, confirms their identity mapping across platforms, and provides explicit acknowledgment. Consent is logged per employee per channel and is revocable at any time.
View full technical specifications →