HaloPSA Integration Guide
A step-by-step guide to getting HaloPSA connected
Here are the minimum requirements for on-premise environments.
- Fully Chained SSL Certificate.
- The latest stable version of HaloPSA.
- If your Halo instance restricts access based on IP, our IPs are 3.23.117.12 & 3.138.54
Note: On-premise users can populate the Tenant field by typing in the words Not set.
Connecting HaloPSA
Register Gradient
Upon initial registration of your new account, select HaloPSA and click Next. You will then be given a connection checklist. Please gather these items before progressing to the next page. Let's head over to HaloPSA.
Create Role
Roles can be accessed by navigating to Configurations > Teams and Agents > Roles. You can create a new Role called Gradient.
Press save.
Go to the permissions tab, and give the following permissions:
- Clients Access Level - Read Only
- Items Access Level - Read and Modify
- Invoices Access Level - Read, Create and Modify
- Client Contracts Access Level - Read and Modify
Save this role, then proceed to creating a new Agent.
Configure Agent
Navigate back to the Configurations page. Now go to Teams & Agents > Agents.
On this page, we will create a new Agent. Press the New button in the top right.

- Username will be Gradient
- Select Gradient under Roles
- Select the API only agent option
- Default Team can be *No Default Team*
- Work hours will be Default Working Hours
Scroll to the bottom and hit save. Now proceed to creating a new Application.
Create New Application
Login to HaloPSA.
Navigate to Configuration > Integrations > HaloPSA API > View Applications

Click New in the top right.
On the Details tab, enter "Application Name" with Gradient MSP.
Set the "Authentication Method" to Client ID and Secret (Services).
Copy the Client ID and Client Secret into Gradient.
Set the Login Type to Agent.

Select an Agent to log in as. This will be "Gradient" as we created the Agent in the earlier step.
Press Save. Press OK if you get a permissions pop-up.
On the Permissions tab, enable the following permissions:
- Read: Customers
- Read: Contracts
- Edit: Contracts
- Read: Items
- Edit: Items
- Read: Invoices
- Edit: Invoices
Press save.

There is one more step inside of Halo before we can finalize the connection to Gradient.
Finish Gradient Connection
Within Halo PSA, navigate to Configuration > Integrations > HaloPSA API
Copy the Resource Server, Authorization Server and Tenant into Gradient.

Be sure when you paste Authorization Server you insert a / at the end of the URL, so it should say /auth/ . If you forget the / at the end, the test will fail.
Now you should have all of the items populated inside of Gradient, so you can press Save and Test.

When you press continue the wizard will run the initial sync, which will take a few minutes, before asking you to continue to your dashboard.
Congratulations, you've successfully connected your PSA!