How to Get Started with KnowBe4 for Microsoft 365

In this article, you’ll learn how to get started with KnowBe4 if your organization uses Microsoft 365. This article will cover how to whitelist our mail servers, add our Phish Alert Button (PAB), enable single sign-on (SSO) for your users, set up user provisioning, and integrate our SecurityCoach product.

For more information on connecting your Microsoft 365 account to your KMSAT console, read the sections below.

Jump to:
Whitelisting

• Exchange

Setting Up the PAB

• Exchange
• Outlook

Setting up SAML for SSO
Setting up User Provisioning

• Active Directory Integration (ADI)
• System for Cross-domain Identity Management (SCIM)

Setting Up SecurityCoach

Whitelisting

Whitelisting KnowBe4 allows our emails to reach your users’ inboxes so your users can receive Phishing Security Tests (PSTs) and training notifications.

For more information, see the articles listed below:

• How to Use Advanced Delivery Policies in Microsoft Defender for Office 365
• Smart Hosting for Phishing Security Tests
  • How to Find Your Microsoft 365 Host Name
    Note: Smart hosting is referred to as “Skiplisting” by Microsoft 365.
• How to Whitelist by Email Headers in Microsoft 365 or Microsoft Exchange 2016
  • When Should I Whitelist by Email Header?
• Whitelisting Training Notifications in Microsoft Defender for Office 365
• Whitelisting for Avanan in Microsoft 365 and Google Workspace
• Direct Message Injection (DMI) Configuration Guide
  • Direct Message Injection (DMI) FAQ
• Whitelisting Emails from KnowBe4 Employees (Non-Phishing/Training)
• How to Verify You Have Whitelisted KnowBe4 Correctly
• Whitelisting Troubleshooting

Back to top

Exchange

For more information on whitelisting for Exchange, see the articles listed below:

• Whitelisting by IP Address in Exchange 2016
• How to Whitelist by Email Headers in Microsoft 365 or Microsoft Exchange 2016
• How to Bypass the External Warning Banner for Exchange 2016 or Microsoft 365

Back to top

Setting Up the PAB

The PAB allows your users to report suspicious emails to help keep your organization secure.

For more information, see the articles listed below:

• Hybrid Phish Alert Button (PAB) Product Manual
• Outlook Mobile App (iOS and Android) and Microsoft 365 Phish Alert Button Product Manual
• Multiple Phish Alert Button Instances (Multi-PAB): Microsoft 365/Exchange
• How Do I Use the Phish Alert Button (PAB) for Microsoft 365?
• FAQ: Phish Alert Button (PAB)

Back to top

Exchange

For more information on using the PAB with Exchange, see the articles listed below:

• Exchange 2013/2016 (Server-Based) Phish Alert Button Product Manual
  
  • How Do I Change the Phish Alert Text for Exchange (Server-Based) PAB?
• Hybrid Phish Alert Button (PAB) Product Manual

Back to top

Outlook

For more information on using the PAB with Outlook, see our Outlook Mobile App (iOS and Android) and Microsoft 365 Phish Alert Button Product Manual.

Back to top

Setting Up SAML for SSO

Enabling SAML for SSO will allow your users to automatically log in to KnowBe4 for their security awareness training using your SSO provider.

For more information, see the articles listed below:

• How to Set Up SAML Single Sign-on for the Security Awareness Training Platform
• How Do I Configure SSO/SAML with Microsoft Entra ID?
• How Do I Enable SSO/SAML For Active Directory Federation Services (AD FS)?

Back to top

Setting Up User Provisioning

You can manage your users through Active Directory Integration (ADI) or KnowBe4’s System for Cross-domain Identity Management (SCIM). ADI and SCIM allow you to add, change, or archive your users and groups within your KMSAT console.

For more information, see the articles below:

• How to Use the Provisioning Tab
• How to Disable User Provisioning

Back to top

Active Directory Integration (ADI)

ADI allows you to manage your user list in KnowBe4 through your AD. For more information, see the articles listed below:

• Benefits of Setting Up Active Directory Integration (ADI)
• Active Directory Integration (ADI) Configuration Guide
• FAQ: Active Directory Integration (ADI)

Back to top

System for Cross-domain Identity Management (SCIM)

SCIM allows you to manage your users all in one place by syncing user information from your identity provider (IdP) to your KMSAT console. For more information, see the articles listed below:

• SCIM Configuration Guide
• How to Configure SCIM for Azure

Back to top

Setting Up SecurityCoach

SecurityCoach is an add-on product for the KMSAT console, available to Platinum and Diamond-level subscriptions. You can use SecurityCoach to coach your users about risky activity in real time using SecurityTips.

For more information, see the articles listed below:

• SecurityCoach Quickstart Guide
• SecurityCoach Product Manual
• Microsoft 365 and Microsoft Defender for Cloud Apps Integration Guide for SecurityCoach
• Microsoft Entra ID Protection Integration Guide for SecurityCoach
• Microsoft Defender for Endpoint Integration Guide for SecurityCoach
• Microsoft Teams Integration Guide for SecurityCoach

Back to top