📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Add Client

Create a new client organization under your account, with its first user, in a single form.

Where to find it
Clients › Add
Who can use it
Anyone who can see the page. The roles you can give the new organization's first user depend on your own role.
Plan
Client organizations (MSP and auditor accounts)
For
MSPs and auditors

What the page is for

Add Client sets up a new organization that you manage or audit. You give it a name, a short name and its primary email domain, choose what kind of organization it is, and decide how quickly it receives Lavawall updates.

You can create the organization's first user at the same time and send them an invitation email. Where available, you also choose who may hold a recovery key for the client's password vaults, and which extra compliance standards the organization must follow on top of the ones it inherits from you.

When the organization is created, the page offers a Download Agents button so you can install the Lavawall agent on the client's computers straight away.

What you see

The Add Client page, with the organization information, vault recovery, compliance standards, primary user and create organization numbered 1 to 5.
The Add Client page. Numbers match the list below.
  1. Organization Information: Organization Name, Primary domain (with a No domain switch), Short Name, Company Type, Update Priority and Initial User.
  2. Vault recovery: whether you may hold a recovery key for this client, or Client-only.
  3. Compliance standards: standards inherited from you, extra standards to tick, and the Trusted computers switch.
  4. Primary User: First Name, Last Name, Phone (with No phone) and Email Address (with Send invitation). Shown only when you choose an initial user.
  5. Create Organization: checks the form and creates the organization.

How to use this page

How to add a client organization

  1. Enter the Organization Name. A Short Name of up to 12 characters is filled in for you; change it if you like. It is used in form titles and drop-down menus.
  2. Enter the Primary domain, such as example.com. If the client has no domain of its own, turn on No domain.
  3. Choose the Company Type: Client (with remediation/control capabilities), Read-only audit client, Managed IT Service Provider (may have clients), Auditor (read-only, compliance focused) or Stand-alone company (no client capabilities).
  4. Choose the Update Priority, from Beta tester to Lowest risk. Mainstream is the default.
  5. Select Create Organization. When you see "Company created.", select Download Agents to install the agent for this client.

How to add the first user at the same time

  1. In Initial User, choose a role instead of Do not add a user right now. Organization administrator (Client Local IT) gives the user full access to their own organization.
  2. In Primary User, enter First Name, Last Name and Email Address.
  3. Enter a Phone number, or turn on No phone.
  4. Leave Send invitation on to email the user a sign-in link, or turn it off to tell them yourself.
  5. Select Create Organization.

How to choose vault recovery and compliance settings

  1. Under Vault recovery, keep We may hold a recovery key for this client (the default), or choose Client-only if the client cannot let a third party hold a key to their stored passwords.
  2. Under Compliance standards, tick any standards the client must follow in addition to the ones marked inherited.
  3. Leave Trusted computers on to inherit your setting, or turn it off to require an authenticator code at every sign-in for this organization.

Tips

  • The domain is cleaned up as you type: "https://www.example.com/page" becomes "example.com".
  • Choose Client-only vault recovery for law firms, clinics and others under rules such as CJIS. If that client loses both its recovery key and its passphrases, nobody can recover the vault contents.
  • A client can later tighten its vault recovery choice. Only a Super Admin at the client can loosen it again.
  • Selecting CJIS also turns on FIPS 140-3, and some standards do not allow trusted computers; the switch is locked when that applies.
  • Use Beta tester or Early adopter only for organizations comfortable receiving updates first.

Troubleshooting

  • "Invalid Domain" means the domain is not in the form name.tld, such as example.com. Subdomains and web addresses are trimmed; free email domains such as Gmail are not allowed.
  • "Validation Errors" lists what is missing, for example the full company name, a short name between 1 and 12 characters, or the initial user's name, phone or email.
  • "Company already exists" means you already have a client with the same name or short name.
  • "User was created, but the invitation email could not be sent." The organization and user exist; tell the user how to sign in yourself.
About FIPS 140-3: the FIPS 140-3 settings described here use validated components: the Go Cryptographic Module (CMVP certificate #5247) and, for hardware security keys, the YubiKey 5 FIPS (CMVP certificate #5291). More about FIPS 140-3 in Lavawall®.

Task guides that use this page

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.