KnowBe4's security awareness training console supports SAML 2.0, so your users can quickly and easily log in to KSAT using your organization's single sign-on (SSO) or Identity provider (IdP) without having to set up or use a password. 

You must be an account administrator to set up SSO for your security awareness training console. As a safeguard, account admins will retain the ability to log in to the security awareness training console with their password.

Free accounts can test and connect the SAML single sign-on integration. However, access to the Users tab and user provisioning are only available for KnowBe4 accounts with an active subscription. To learn more about subscriptions, see our Service Pricing Levels page. If you have any questions or experience any issues setting up SAML single sign-on, please contact our support team. 

Configure Single Sign-On

The steps and information needed for configuring SSO vary depending on your provider. Review the articles in the SAML Single Sign-on section of the Knowledge Base to find the correct steps for your provider.

Once you're ready to configure SAML single sign-on in your SSO provider, you'll need the following information from your security awareness console account.

1. From your KnowBe4 console, click your email address in the top right corner and select Account Settings.
2. Under Account Integrations, navigate to the SAML section.
3. Find the following information by expanding the SAML Settings box:
   • Sign in URL
   • Sign out URL
   • Callback URL
   • Identifier: KnowBe4
4. When prompted, enter the necessary information into your SAML single sign-on provider to finish configuring SAML single sign-on.

Add Your SAML Provider Information

Next, you'll need to add the information about your SAML provider under the SAML Provider Config section of your KSAT console.

1. From your KnowBe4 console, click your email address in the top-right corner and select Account Settings.
2. Navigate to the SAML section.
3. Expand the SAML Settings box. For more information on the available SAML settings, please see the SAML section of our KSAT Account Settings: Account Integrations article. 
4. Enter your IdP SSO Target URL.
5. Select either SHA-1 or SHA-256 button. By default, SHA-1 is selected.
6. Click the Enable SAML SSO checkbox at the top of the SAML Settings box. 
7. When finished, click Save SAML Settings.

If you are a partner and want to enable SAML, please follow the instructions in our MSP/Reseller/Multi-Account Org: How to Enable SAML on Your Account Management Console article.

Test Your SAML Integration

You'll want to test your SAML integration to ensure you can use SSO with your KSAT console successfully.

To test your SAML Integration, follow the steps below:

1. Ensure the SAML Enabled box is checked, then click the Update Profile button at the bottom of the Settings page.
2. Open an incognito window and navigate to your Knowbe4 login page.
   • See our KnowBe4's Training Instances article for a full list of login links.
3. Enter your email address for your KnowBe4 account.
4. It should redirect you to log in to your SAML provider.
5. After you've authenticated, you will be logged back into your KSAT account if the integration is successful.

Additional Resources

If you need any additional assistance setting up SAML Single Sign-on with your specific SSO provider, check out our How-to Enable SAML Single Sign-on for Your SSO Provider article.