In this article, you’ll learn how to get started with KnowBe4 if your organization uses Microsoft 365. This article will cover how to whitelist our mail servers, add our Phish Alert Button (PAB), enable single sign-on (SSO) for your users, set up user provisioning, and integrate our SecurityCoach product.

For more information on connecting your Microsoft 365 account to your KSAT console, read the sections below.

Whitelisting

Whitelisting KnowBe4 allows our emails to reach your users’ inboxes so your users can receive Phishing Security Tests (PSTs) and training notifications.

For more information, see the articles listed below:

• Advanced Delivery Policies in Microsoft Defender for Office 365
• Smart Hosting Guide
  • Find Your Microsoft 365 Host Name
    Note: Smart hosting is referred to as “Skiplisting” by Microsoft 365.
• Whitelist by Email Headers in Microsoft 365 or Microsoft Exchange 2016
• Whitelist Training Notifications in Microsoft Defender for Office 365
• Whitelist for Avanan in Microsoft 365 and Google Workspace
• Direct Message Injection (DMI) Configuration Guide
  • FAQ: Direct Message Injection (DMI)
• Whitelist Emails from KnowBe4 Employees (Non-Phishing/Training)
• Verify Your Whitelisting
• Whitelisting Wizard

Exchange

For more information on whitelisting for Exchange, see the articles listed below:

• Whitelist by IP Address in Exchange 2016
• Whitelist by Email Headers in Microsoft 365 or Microsoft Exchange 2016
• Bypass the External Warning Banner for Exchange 2016 or Microsoft 365

Setting Up the PAB

The PAB allows your users to report suspicious emails to help keep your organization secure.

For more information, see the articles listed below:

• Hybrid Phish Alert Button (PAB) Product Manual
• Outlook Mobile App (iOS and Android) and Microsoft 365 Phish Alert Button Product Manual
• Multiple Phish Alert Button Instances (Multi-PAB): Microsoft 365 or Exchange
• Phish Alert Button (PAB) for Microsoft 365 Guide
• FAQ: Phish Alert Button (PAB)

Exchange

For more information on using the PAB with Exchange, see Hybrid Phish Alert Button (PAB) Product Manual.

Outlook

For more information on using the PAB with Outlook, see our Outlook Mobile App (iOS and Android) and Microsoft 365 Phish Alert Button Product Manual.

Setting Up SAML for SSO

Enabling SAML for SSO will allow your users to automatically log in to KnowBe4 for their security awareness training using your SSO provider.

For more information, see the articles listed below:

• Set Up SAML Single Sign-on (SSO) for the Security Awareness Training Console
• Configure SAML Single Sign-on (SSO) with Microsoft Entra ID
• Enable SAML Single Sign-on (SSO) for Active Directory Federation Services (AD FS)

Setting Up User Provisioning

You can manage your users through Active Directory Integration (ADI) or KnowBe4’s System for Cross-domain Identity Management (SCIM). ADI and SCIM allow you to add, change, or archive your users and groups within your KSAT console.

For more information, see the articles below:

• Provisioning Subtab Guide
• Disable User Provisioning

Active Directory Integration (ADI)

ADI allows you to manage your user list in KnowBe4 through your AD. For more information, see the articles listed below:

• Benefits of Setting Up Active Directory Integration (ADI)
• Active Directory Integration (ADI) Configuration Guide
• FAQ: Active Directory Integration (ADI)

System for Cross-domain Identity Management (SCIM)

SCIM allows you to manage your users all in one place by syncing user information from your identity provider (IdP) to your KSAT console. For more information, see the articles listed below:

• SCIM Configuration Guide
• Configure SCIM for Microsoft Entra ID

Setting Up SecurityCoach

SecurityCoach is an add-on product for the KSAT console, available to Platinum and Diamond-level subscriptions. You can use SecurityCoach to coach your users about risky activity in real time using SecurityTips.

For more information, see the articles listed below:

• SecurityCoach Quickstart Guide
• SecurityCoach Product Manual
• Microsoft 365 and Microsoft Defender for Cloud Apps Integration Guide for SecurityCoach
• Microsoft Entra ID Protection Integration Guide for SecurityCoach
• Microsoft Defender for Endpoint Integration Guide for SecurityCoach
• Microsoft Teams Integration Guide for SecurityCoach