Skip to content
Menu

MSP Client Onboarding Checklist: A Technical SOP

Build an MSP client onboarding checklist with phased technical work and clear ownership. Trim irrelevant steps for a checklist your team can run.

Technician checks an MSP client onboarding checklist while a colleague handles a support call

An MSP client onboarding checklist should cover access, systems, documentation and the client’s first contact with support. Organize it into phases, assign an owner and remove steps that do not apply to the client.

Picture a mid-sized client, 50 users, a legacy file server. Without the checklist, you discover the missing network drive mapping after go-live, when the CFO can't reach the finance folder. With it, that point gets checked before anyone notices. The checklist catches the small things that become big tickets.

What Belongs on the Checklist (and What Doesn't)

The test for every point is simple: does it affect service delivery? If it prevents a ticket or speeds up resolution, it belongs. If it doesn't, cut it.

"Verify backup job runs" belongs. "Order a welcome gift" does not. That test keeps the list from bloating, and it's the judgment call that decides what stays.

And the list isn't one-size-fits-all. My read: a 10-user client with no legacy systems might need only 40 of the 90 points. The checklist is a starting point, and you trim it per client based on size and complexity. That's the second judgment call: knowing what to drop before you start.

Phase It: Discovery, Setup, Migration, Testing, Go-Live, and Post-go-live

Order matters as much as content. Break the 90 points into six phases so you can track progress and catch issues early. Use the following proposed checks with your existing PSA and RMM, and a single onboarding owner who has focused time.

Replace each role below with a named person on the project board. Record the result and supporting evidence against each applicable point. For a point you remove, record why it does not apply; agree custom steps for systems outside this starting list.

Discovery

PointProposed CheckOwner
1Confirm the signed service scope and record the support start date.Onboarding owner
2Name the client sponsor and the person authorized to approve changes.Onboarding owner
3Name the onboarding owner and reserve focused time away from daily tickets.Service delivery manager
4List the sites and their support contacts.Onboarding engineer
5Reconcile the user list with the client’s approved roster.Client sponsor
6Inventory the computers and record their assigned users.Onboarding engineer
7Inventory the servers and record their service roles.Onboarding engineer
8Record network devices and their management addresses.Network engineer
9Map the internet connections and record provider escalation contacts.Network engineer
10Identify identity systems and the authorized route for administrative access.Identity engineer
11Record domain ownership and identify who controls DNS changes.Identity engineer
12List business applications and obtain the client’s critical-workflow priorities.Onboarding owner
13Identify the file locations and permissions needed for those workflows.Onboarding engineer
14Record backup coverage and agree recovery priorities with the client.Backup engineer
15Record discoveries outside scope and obtain a decision before scheduling changes.Onboarding owner

Setup

PointProposed CheckOwner
16Create or verify the client record in the existing PSA.PSA administrator
17Enter authorized contacts and approval responsibilities in the PSA.PSA administrator
18Check that the PSA agreement reflects the signed scope.PSA administrator
19Set the agreed support hours and escalation contacts.Service delivery manager
20Create the client’s RMM organization and sites.RMM administrator
21Assign approved device naming rules and groups.RMM administrator
22Check RMM enrollment against the asset inventory.RMM administrator
23Apply the agreed monitoring policy and document exclusions.RMM administrator
24Route monitoring alerts to a named PSA queue.RMM administrator
25Create the documentation location and assign access permissions.Onboarding engineer
26Store approved credentials through the agreed vault process.Identity engineer
27Verify named technician access within the client’s authorization.Identity engineer
28Prepare the approved security-agent policies and deployment scope.Security engineer
29Prepare backup jobs for the agreed protected systems.Backup engineer
30Record the approval, maintenance window, and rollback instructions for each planned change.Onboarding owner

Migration

PointProposed CheckOwner
31Confirm which migrations are included and mark the rest as not applicable.Onboarding owner
32Obtain client approval for the cutover sequence and affected services.Onboarding owner
33Confirm the source data and destination for each approved move.Migration engineer
34Verify the agreed recovery copy before changing production data.Backup engineer
35Record the existing permissions before migration.Migration engineer
36Stage the destination storage and check its agreed capacity.Migration engineer
37Copy an approved test set and compare it with the source.Migration engineer
38Apply the approved destination permissions.Migration engineer
39Migrate the approved file data within the agreed window.Migration engineer
40Update the agreed network drive mappings.Onboarding engineer
41Configure the approved mailbox changes.Messaging engineer
42Schedule approved DNS changes with the authorized domain administrator.Network engineer
43Configure the agreed business applications and record vendor dependencies.Application engineer
44Record incomplete transfers and exceptions for the testing phase.Migration engineer
45Apply the agreed go/no-go check before ending the migration window.Onboarding owner

Testing

PointProposed CheckOwner
46Test representative user sign-in with a client-approved test account.Identity engineer
47Confirm the agreed MFA enrollment and recovery arrangements.Identity engineer
48Test the authorized technician access route.Identity engineer
49Ask an authorized finance user to open the required mapped folder.Onboarding engineer
50Check that a user without permission cannot open the restricted test folder.Onboarding engineer
51Test agreed email sending and receiving paths.Messaging engineer
52Have the client test the agreed business-application workflow.Application engineer
53Confirm the required printers work for the nominated users.Onboarding engineer
54Test the agreed remote-work connection from an approved device.Network engineer
55Check backup-job completion and investigate any exceptions.Backup engineer
56Restore the agreed test data to a safe test location and record the result.Backup engineer
57Confirm the planned security agents report to their management console.Security engineer
58Trigger an authorized test alert and verify its PSA routing.RMM administrator
59Run a helpdesk test request through acknowledgment and escalation.Service delivery manager
60Record test evidence and assign an owner to each unresolved result.Onboarding owner

Go-Live

PointProposed CheckOwner
61Review unresolved tests and make the go/no-go decision with the client.Onboarding owner
62Obtain approval for accepted exceptions and their next actions.Client sponsor
63Confirm the cutover window and rollback decision authority.Onboarding owner
64Tell affected users when the support arrangement changes.Client sponsor
65Send the helpdesk contact details and agreed support hours.Service delivery manager
66Explain the urgent-request route and who receives it.Service delivery manager
67Confirm client leadership will reinforce the agreed ticket process.Client sponsor
68Explain how technicians should record or redirect walk-up requests.Service delivery manager
69Run a client introduction to the support process.Account owner
70Hand the service desk the tested access and system documentation.Onboarding engineer
71Review the client’s critical workflows with the receiving desk lead.Onboarding owner
72Activate the agreed monitoring and ticket-routing configuration.RMM administrator
73Confirm backup responsibility at the provider handover.Backup engineer
74Reconcile billable service items with the agreed effective dates.Finance
75Record client acceptance and the post-go-live review appointment.Onboarding owner

Post-go-live

PointProposed CheckOwner
76Review initial tickets for missing onboarding information.Service delivery manager
77Ask the client sponsor about unresolved access or workflow problems.Account owner
78Recheck the user and device inventory against enrolled systems.Onboarding engineer
79Review agent enrollment failures and assign their remediation.RMM administrator
80Review monitoring noise and approve any policy adjustments.RMM administrator
81Check backup exceptions and confirm the next recovery test.Backup engineer
82Review unresolved security-deployment exceptions.Security engineer
83Reconcile billed items with the accepted service scope.Finance
84Check that service desk staff can find the handover documentation.Service delivery manager
85Review overdue checklist items and name their next owners.Onboarding owner
86Have client leadership revisit ticket use where requests bypass the agreed route.Account owner
87Record actual onboarding time against the local planning allowance.Onboarding owner
88Agree the treatment of additional remediation with the client.Account owner
89Update the checklist from verified omissions and unnecessary steps.Onboarding owner
90Close onboarding only after documenting remaining work and its transfer to the agreed owner.Onboarding owner

Discovery needs a named owner who checks that the site survey and preparation are complete. One owner reported spending three weeks on cleanup after relying on someone else for that work, rather than a few days resolving the identified issues.

Users Make or Break Onboarding: Plan for Adoption

You can have the tech perfect and still fail if users don't use the new process. End-user adoption is part of onboarding, and it belongs on the checklist. One owner who onboarded a client that used to have internal IT described users walking up to techs instead of submitting tickets, which burned out the techs and created hallway tickets.

One owner described a meet-and-greet with a cookie cake and flyers explaining the helpdesk process. Another described a tapering on-site schedule, starting at three days a week and dropping to a half-day, while leadership enforced ticket use. The common thread I see: leadership has to back it. Without their enforcement, the plan fails.

Tell users how to contact the helpdesk and ask technicians to record requests through the agreed ticket process. Explain how hallway requests will be redirected so the work can be tracked.

Who Owns the Checklist and the Cleanup

A checklist without an owner is a list of good intentions. Assign a single onboarding owner, someone who can make decisions and has the authority to get access and information from the client. If that person is also handling daily tickets, they won't have the focus to do the job properly. You may need a second person to cover their other duties during onboarding.

The owner runs the checklist, and they also run the post-go-live review. That review is a scheduled, non-optional pass, one to two days of focused work, where they verify every point was completed and fix any gaps before they become chronic. Skipping it is how you end up with the mess you're trying to avoid.

When the Checklist Fails (and What to Do Instead)

A 90-point checklist is not a magic number. The right size for a client depends on their environment, and if you treat the list as a fixed template, it will choke on a client with unique systems. It also fails when no one is accountable, or when the client resists the process. Those are the circumstances to watch for, not excuses to abandon the checklist idea.

When the checklist feels like too much, you have three moves.

  1. Scale it down: a 10-user client with no legacy systems might need only 40 points.
  2. Automate the parts that are repeatable: one owner described using interactive Excel worksheets and RMM automation to streamline data collection and reported missing far less information.
  3. Consider outside help for work your team cannot cover. Agree the client-specific scope, acceptance checks, and responsibility for later adjustments before hiring anyone.

The honest costs, as planning figures to set against your own numbers rather than benchmarks: building the checklist takes roughly 10 to 20 hours of planning and documentation. Running it per client takes 2 to 3 days of focused work, depending on size. Maintaining it takes about 30 minutes a week. Use these as examples to check against your own figures, not as promises that every client will fit them.

Start With a 10-Point Pilot This Week

You don't build the full 90-point checklist on day one. Start with a 10-point pilot on your next onboarding. Pick the 10 points that would have prevented your last onboarding mess, and run them on the next client.

See what works, what you missed, and what you'd add. Then expand to the full 90.

Choose a client for the pilot, assign the onboarding owner and put the checklist on the project board. Review missed or unnecessary steps before using it on the next account.

Written ByMegan Friesen

Staff Writer, Operations and People. Megan Friesen covers the business of running an MSP for MSP Outpost: service delivery, people and the ticket board. She judges every idea by what it does on Monday morning.

More by Megan

mspoutpost.com/articles/msp-client-onboarding-checklist-a-technical-sop

Written by Megan Friesen
MSP Outpost publishes information, not legal, financial, insurance, tax or compliance advice, and reading it creates no professional relationship. For decisions about your business, talk to a qualified professional.

Welcome Back

Sign in to your MSP Outpost account.