SOAR platform with MSSP add-on

The SOAR Managed Security Service Provider (MSSP) add-on is an optional feature that allows you to manage multiple SOAR child organizations from a single configuration organization. Each child organization can be assigned to a different group, division, or company to meet their incident response requirements.

If deploying apps to a SOAR Platform with the MSSP add-on, you need to deploy the app to the configuration organization using the Resilient® Circuits customize command, as you would in the standard deployment. The difference is that you do not deploy an app to any child organization; instead, the system administrator pushes the app to the child organizations. You then create a separate integration server for each child organization to run the app in the child organization.

You still need to install the app package using the normal pip install command on each integration server whose child organization uses that package. And you need to configure the app.config file on each integration server.