> For the complete documentation index, see [llms.txt](https://docs.keeper.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.keeper.io/keeperpam/secrets-manager/integrations/freshservice-itsm.md).

# FreshService ITSM

<figure><img src="/files/sqcgoCyGViaQzMHP8kTa" alt=""><figcaption></figcaption></figure>

## Overview <a href="#overview" id="overview"></a>

The Keeper Security ITSM application provides a secure and streamlined integration between Keeper Security Alerts and FreshService incident tickets. It enables enterprise customers to centrally manage and respond to Keeper-generated security alerts by automating their intake, transformation, and creation as FreshService Incident tickets.

This integration helps security teams maintain visibility, improve response times, and ensure that Keeper Security alerts are managed consistently within existing FreshService workflows.

[Marketplace Link](https://www.freshworks.com/apps/keeper_security_itsm_1/)

## Features

* Receive Keeper Security alerts and incidents through a protected webhook endpoint, ensuring that only authorized sources can submit data to the platform.
* Guided Setup to configure webhooks and alert severity mappings.
* Transform incoming alerts into a FreshService Incident ticket
* Provides custom priority mapping for Keeper Security alert types enabling FreshService administrators to work on incidents on priority basis.

## Example Use Cases <a href="#example-use-cases" id="example-use-cases"></a>

Below are some example UseCases.

**Password BreachWatch In Keeper Vault**

1. Trigger: BreachWatch has detected a record in the Keeper vault with a vulnerable password.
2. Action: An alert will be sent to FreshService webhook that contains the BreachWatch incident.
3. FreshService Keeper Security ITSM app will receive the alerts, checks for priority mapping and creates a Incident Ticket.
4. Result: FreshService admins can audit, and work on the incident reported.

**Privileged User Behavior Monitoring**

1. Trigger: An admin user created a new Team or new policy in Keeper Administrative account.
2. Action: An alert will be sent to FreshService webhook that contains the incident information and an incident ticket will be created.
3. Result: SIR admins can audit, and work on the incident reported.

### Prerequisites <a href="#prerequisites" id="prerequisites"></a>

* Alerts configurations in Keeper Admin Console
* FreshService subscription

## Configuration Instructions

To configure the Keeper Security ITSM App in FreshService perform below steps:

1. Login as a admin in FreshService portal and click on the Market place icon, **Search for Keeper Security ITSM** and Download the ap&#x70;**.**

<figure><img src="/files/ExuGkOXcEXZQ4pEIFt5t" alt=""><figcaption></figcaption></figure>

2. Once downloaded, head over to Manage Apps > Keeper Security ITSM > Click on Install.\
   you will see below app configuration page

<figure><img src="/files/PqIMmooodnlfXXfQf0KU" alt=""><figcaption></figcaption></figure>

### Getting Webhook Token

To get a webhook authentication token, Login to Keeper Security admin console click on **Reporting & Alerts** and create a new alert.

<figure><img src="/files/DxhCPjA9Glq5Bfsvdpbk" alt=""><figcaption></figcaption></figure>

Click on **Add Recipient** then click on **Add webhook.**

<figure><img src="/files/z55MFjFR4kKc6HvH5sXo" alt=""><figcaption></figcaption></figure>

Generate the token by click on generate button.

<figure><img src="/files/lo5a7TZP7kRWTInUe1T2" alt=""><figcaption></figcaption></figure>

Once, the token is generated, copy the same token in app configuration page in FreshService ITSM application.

Once, the app is successfully install. Copy the webhook URL back to above alert configuration and save the alert configurations in Keeper admin console.

### Receiving Alerts

Once, the application is configured, You will receive alerts in tickets section

<figure><img src="/files/wzVnzdzZyazhQTI6Djaj" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/FNC0vI75R5u3BJcFOYRG" alt=""><figcaption></figcaption></figure>

### Keeper Security Event Types Mapping

In the app configuration, users can set the priority, urgency, and impact for each event type. These values determine how alerts are classified when they create tickets. Configure them to match your team's incident-management process.

<figure><img src="/files/a1qn0802aKXp35AYYxJN" alt=""><figcaption></figcaption></figure>

### Troubleshooting

Use the application logs section to review relevant logs during troubleshooting.

<figure><img src="/files/GkNkxPoh6efWJCK2jiRy" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/pCyd7IsfHTj28S9SK3kf" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.keeper.io/keeperpam/secrets-manager/integrations/freshservice-itsm.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
