Important Note - This checklist builds on the Set Up Checklist for SendSafely Administrators. We recommend you complete those steps prior to starting on the items below. 

1. Bookmark SendSafely Freshdesk Integration Resources

The SendSafely Online Help Center provides numerous Freshdesk integration setup resources, along with a recorded demo of the SendSafely Freshdesk integration for reference.

The SendSafely Blog & Developer Center also provide updates on new features as they are release, as well as proof-of-concept code examples that may be useful in your environment. Please also review the Set Up Checklist for SendSafely Administrators.

Lastly, you can also email support@sendsafely.com with any questions or issues. 

2. Install the SendSafely Freshdesk Sidebar App

The Freshdesk Sidebar App allows agents to view and download received files associated with individual tickets within the Freshdesk Agent Console. The App also allows agents to securely send files and messages outbound to customers.

The sidebar app can be installed from the Freshdesk Marketplace, and installation instructions can be found here.  Note - files up to 10GB in size can be sent by agents via the SendSafely Freshdesk Sidebar App.

3. Configure your Inbound Workflow

SendSafely provides several options for collecting sensitive files from customers and other external parties, all leveraging the SendSafely Dropzone.

• SendSafely Hosted Dropzone to Freshdesk: The SendSafely Hosted Dropzone is a turn-key, standalone web page for secure file submission. Hosted Dropzone setup instructions are located here, and you can connect your Hosted Dropzone to Freshdesk using one of our pre-built connectors (see step 6 below). Submitted files will either open a new ticket, or be attached to an existing ticket.
• Freshdesk Help Center Widget: Our Dropzone widget integrates SendSafely’s secure file upload capabilities with the Freshdesk Help Center New Ticket and Ticket Reply screens. Installation instructions are here. 
• Custom Form / Dropzone to Freshdesk: You can also build custom forms that use the SendSafely API to securely receive files for tracking via Freshdesk tickets.

Most organizations use several of the different methods described above. Note - your customers can submit very large files (> 10 GB) via a SendSafely Dropzone. 

4. Freshdesk Dropzone Canned Response Setup

The Agent Canned Response feature of Freshdesk allows your agents to easily generate ticket-specific links to Hosted Dropzones that customers will use for file submission. Instructions are in this article under the "Add a Canned Response to Freshdesk for Inserting the Dropzone Link" section.

5. Ensure Dropzones are Production Ready

For any system integration, we recommend setting up a Dropzone under a Service Account, using a team alias such as support@company.com. SendSafely Administrators can then manage the Service Account Dropzone via the SendSafely Enterprise Console. 

Be sure to add your Freshdesk agents to the Dropzone recipient list by following the steps outlined under "Initial Dropzone Setup - Step 3 - Configure Additional Recipients".

SendSafely provides many configuration options on the Dropzone Profile that may be useful within your workflow:

• Custom Form Input Label (for Hosted Dropzone)
• Expiration Settings - for inbound files
• Restrict File Download (view only mode)
• Only allow files with certain extensions

Lastly, if you are not using a Service Account to host your Dropzone, we recommend backing up the initial Trusted Browser Key for the Dropzone Owner account. This initial key can be used to access all historical packages received via that Dropzone - which is especially useful if you choose to automate the download/export of received files in the future.

6. Finalize your Dropzone Connector Production Configuration

For customer pilots, SendSafely may host the connector on your behalf for ease of setup and to facilitate testing. For production rollouts, however, SendSafely recommends that connectors be hosted within your own Google or AWS environment. As part of the pilot process, plans should be put in place for transitioning the connector to self-hosting.

Resources for hosting your own SendSafely Freshdesk connector can be found here:

• Google Apps Script Connector
• AWS Connector
• Zapier 

7. Configure SendSafely Data Retention Settings

Determine your organization’s data retention requirements with regard to the Freshdesk ticket attachments and messages protected by SendSafely. By default, all secured attachments and messages sent or received via SendSafely are subject to the expiration and deletion settings configured for your SendSafely portal. SendSafely does provide several additional options for long-term storage of data for historical record keeping, compliance, and/or regulatory requirements. Please review the following available options described in the Set Up Checklist for SendSafely Administrators:

• SendSafely Platform Expiration Settings 
• Master Key Setup
• Using your own AWS S3 Bucket
• API Export Options

Additional Freshdesk Integration file expiration information: 

• Inbound Files Received by Agents: The file expiration configured in the Dropzone Profile controls the lifetime of inbound files and is managed within the SendSafely web portal.
• Outbound Files Sent by Agents: The lifetime of outbound files sent by an Agent using the Sidebar App is controlled by the default expiration configured in the Agent’s individual SendSafely User Profile and/or the Organization Wide Expiration Settings. 

Expiration Settings Administration - SendSafely Administrators can set a default, min and max expiration for all Agents in the SendSafely Enterprise Console. Please note - Dropzone expiration settings are not controlled by the min/max values set in the Enterprise Console. Instead, they are managed individually by portal Admins.

8. Do your Agents need Email Address Masking?

The SendSafely Masking feature is useful for organizations who do not want to disclose the real email address of agents that send files using SendSafely. The masking feature replaces externally displayed email addresses with the text configured in the user profile First Name, and the first character of the Last Name field. (Users can edit their SendSafely profile from the Account Icon Badge in the top righthand corner -> Edit Profile option). 

You can read more here: Masking User Email Addresses

Please Note - Using the “Email Address Masking” option automatically disables the Reply feature, since it would otherwise expose the Freshdesk Agent email address to the external user.

9. Disable Reply Feature

By default, customers receiving secure files from an agent have the option to reply to that agent via SendSafely. However, to keep all communications associated with a Freshdesk ticket we recommend requesting that support@sendsafely.com disable the Reply function in your SendSafely portal, and encourage customers to perform all replies/secure file uploads via the connected Dropzone.

10. Assess if you need the SEG to keep PII out of Freshdesk

The SendSafely Serverless Email Gateway (SEG) can be used to shield your Freshdesk instance from inadvertently collecting and storing unsolicited Personally Identifiable Information (PII) submitted by customers via plain text email to your support email address. 

The SEG intercepts and encrypts these inbound email attachments before they touch Freshdesk. When combined with the Sidebar App and Dropzone, the SEG provides an end-to-end solution for protecting sensitive information in Freshdesk.

• Keeping Unwanted PII out of your Service Desk

11. Plan for Agent Onboarding

SendSafely recommends preparing and providing internal guidance to your team with regard to how to register their SendSafely accounts as part of the new Freshdesk Agent onboarding process.

Note - The exact instructions to onboard your new Freshdesk agents will depend on the authentication mechanism configured for your SendSafely platform. SendSafely always recommends using your Single Sign On (SSO) infrastructure to authenticate your employees whenever possible. We provide support for multiple providers as part of our base subscription. Importantly, Freshdesk also supports SAML SSO, so if you are using their implementation for your agents, you can also configure your SendSafely platform to use the same IdP (or vice versa).

Typically, the best way for your Freshdesk agents to register their SendSafely account is via the SendSafely Freshdesk Sidebar App installed in their Freshdesk Agent Console. They should be informed to use the “Activate new Account” button, which will then automatically take them to your company SendSafely instance. Depending on the user Authentication method implemented by your SendSafely Admin, the guidance instructions should inform them which option to choose next (i.e., use either the "Login using Single Sign-on" or "Register Now" button). 

Remember to add your Freshdesk agents to the Dropzone recipient list so that they are authorized to decrypt files.

We also recommend that new Freshdesk agents watch this recorded demo of the SendSafely Freshdesk integration as part of their onboarding training.