How to Whitelist Training Notifications in Microsoft Defender for Office 365

Note: To learn how to bypass Microsoft Defender for Office 365 (formerly Microsoft 365 Advanced Threat Protection), read our How to Bypass Safe Link/Attachment Processing of Microsoft Defender for Office 365 article.

To whitelist training notifications sent from KnowBe4 in your Microsoft Defender for Office 365 environment, follow the steps below:

Log in to your mail server Admin portal. Then, navigate to Admin centers > Exchange.
Select mail flow and click on the + sign located in the top-left.
Select Bypass Spam Filtering... from the drop-down. This will open the new rule screen.
Give the rule a name, such as Training Notifications Bypass Clutter and Spam Filtering by Email Header.
Select Apply this rule if… and then choose The sender... > domain is from the drop-down. This will open the specify domain screen.
Enter our hostnames on the specify domain screen and click the + sign. Then, click the OK button. See here for a list of the list of our hostnames.
Verify the Do the following… field is set to Set the spam confidence level (SCL) to… and Bypass spam filtering is set on the right.
Scroll down the screen to the Match sender address in message option. Here, select Envelope from the drop-down.
Click the Save button.

Whitelisting Training Notifications in Microsoft Defender for Office 365