KnowBe4 supports SAML 2.0 so your users can log in to KnowBe4 using your organization's single sign-on (SSO) provider. Using SSO allows your users to log in without needing to set up or use a password.
See our Set Up SAML Single Sign-on (SSO) for the Security Awareness Training Console article to enable SAML in your account settings, and then finish the setup with your SSO provider. We have provided links to instructions for several providers below.
- Active Directory Federation Services (ADFS)
- Auth0
- Microsoft Entra ID
- Centrify
- CyberArk
- Cisco Duo
- Google Workspace (formerly G Suite)
- F5 Big-IP
- JumpCloud
- LastPass
- Okta
- OneLogin
- PortalGuard
- SecureAuth
- Zoho
If you do not see your SAML provider listed and need assistance, please contact support and we will be able to help you.
Remember:When configuring SAML authentication, confirm that the user’s email address in Entra ID matches the email listed in their KnowBe4 user profile. This email should be entered in either the Email or Email Aliases field; however, only the address in the Email field will receive training notification emails. If you’re experiencing SSO login issues, first confirm that the affected user is correctly assigned to the enterprise application, either through a group or by direct assignment. Consider using the SSO bypass link provided by support if necessary. For more information on managing user profiles, see our User Profile Guide.
Note: If you would like to bypass SAML Single Sign-on Integration, navigate to your Knowbe4 login page. Then, add the subdirectory /ui/users/login to the end of the URL. See our KnowBe4's Training Instances article for a full list of login links.