In this article, you'll learn about the Your Organization, Privacy, Allowed Domains, and Authentication tabs in your KnowBe4 Platform organization settings. From these tabs, you can update your organization's profile, support contact information, and login settings, adjust your privacy settings, manage the email domains connected to your account, and enable single sign-on (SSO).
Your Organization
In the Your Organization section, you can review and update your organization's profile, business hours and time zone, support contact information, and login settings. The platform uses your organization profile, time, and support contact information to populate placeholders in phishing templates, landing pages, and training notifications. For more information, see our Placeholders Guide.
This section is divided into four cards: Organization Overview, Time & Location, Primary Support Contact, and Login Settings. Click Edit on the card to update that specific information.
Organization Overview
In this section, you can update your organization's name, industry, phone number, and address.
Time & Location
In this section, you can update the following settings for your organization:
- Time Zone: Select the time zone for everyone in your organization. Users can change their own time zone in their personal settings.
- Date & Time Format: Select how dates and times are shown in the console for everyone in your organization. Users can change their own date and time format in their personal settings.
- Business Days: Select your default business days to ensure automated messages are sent only during business days.
- Business Hours: Select your default business hours to ensure automated messages are sent only during work hours.
- Default Language: Select the primary language for all users and system messages. Users can change their own language in their personal settings.
Primary Support Contact
In this section, you can update the name, phone number, and email address of your organization's primary contact for account service with KnowBe4 and technical support.
Login Settings
In this section, you can update the following settings for your organization:
- Session Timeout: Use the drop-down menu to select how long a session can stay inactive before the user is logged out. The default is 8 hours.
- Allowed Admin IP Addresses: Enter the IP addresses or ranges that admins and Security Role users can log in from. IP addresses must be in CIDR format.
- End a session if its IP address changes: Turn this setting on to end a user's console session if their IP address changes during the session. This setting is off by default.
- Minimum Password Length: Select the minimum length required for passwords.
- Passwordless Login: Turn this setting on to let all users log in without a password. Instead, they receive an email with a customized login link. This setting is off by default.
Privacy
In the Privacy section, you can grant our support team access to your account.
The Allow Support Impersonation toggle controls whether KnowBe4's support team can access your account to help resolve issues or answer questions. When enabled, our support agents can view your account to provide faster, more personalized assistance.
Use the Select Duration drop-down menu to control how long that access remains active. Choose Continuous to allow ongoing access any time you open a new support request, or select a specific time window if you prefer access to expire automatically. You can revisit this setting at any time to extend, shorten, or revoke support access as needed.
Allowed Domains
In the Allowed Domains section, you can view and manage every root domain and subdomain connected to your KnowBe4 account. If your organization uses more than one email domain, add each one here so you can send phishing security tests and assign training to users at those domains.
The Allowed Domains table includes the following columns:
- Domains: The root domain or subdomain. Click the arrow to the left of a root domain to expand or collapse its subdomains.
- Date Added: The date the domain was added to your account.
- Domain Type: Whether the domain is a Root Domain or a Subdomain.
- Status: Whether the domain is Verified or Pending Verification. A domain must be verified before you can send phishing tests or training to users at that domain.
- Actions: Click the ellipsis icon next to a domain to add a subdomain or delete the root domain. Click the ellipsis icon next to a subdomain to delete it.
Click + Add Allowed Domain at the top-right corner of the page to add a new root domain or subdomain. For complete steps, including how to add and verify the required TXT record for a root domain, see our Add and Verify Domains article.
Authentication
In the Authentication section, you can manage your single sign-on (SSO) settings using SAML.
The SAML Configuration card shows whether SAML single sign-on is turned on for your account. You can use the toggle to enable and disable SAML single sign-on for your account. Click Manage Configuration to open your full SAML setup, including your identity provider (IdP) URL, certificate fingerprint, entity ID, and SSO endpoint URLs.
For instructions on completing setup with your identity provider, see our Enable SAML Single Sign-On (SSO) for Your SSO Provider article and the SAML section of our KnowBe4 Console Account Settings: Account Integrations article.
The Bypass Settings card controls how admins can log in without going through your SSO provider.
Check the Allow SAML login bypass with MFA check box to enable this setting and to choose who can bypass SAML login by using a password and multi-factor authentication (MFA) instead.
The Bypass-SSO Login URL field shows your account's bypass URL. Anyone with this URL can log in to your KnowBe4 console with an email address and password instead of through SSO. Click the copy icon next to the field to copy the URL.