Map Users in Real-Time Coaching

In Real-Time Coaching, user mapping links detected behaviors to specific users. In the KnowBe4 Security Awareness Training (SAT) console, users are automatically mapped to their email addresses. Depending on your integrated security vendors, you may also need to map users to other identifiers, such as their hostname or username. We recommend mapping users by configuring automated user mapping rules. You can also upload a CSV file to map users manually, or use both methods together. Real-Time Coaching also provides mapping recommendations for you to review

To learn how to map users by configuring user mapping rules or uploading a CSV file, see the subsections below. For general information about Real-Time Coaching, see our Real-Time Coaching Overview article.

System User Mapping Rules

Real-Time Coaching includes preconfigured user mapping rules that cover common vendor identifiers. To view built-in system rules, follow these steps:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Settings section, select Configure User Mapping Rules.

To enable or disable a rule, use the toggle on the left side of the rule. System rules cannot be deleted or modified.

The following system rules are available for user mapping:

Custom User Mapping Rules

Real-Time Coaching also allows you to configure custom rules to match your security vendor identifiers. To view and manage Custom Rules, follow these steps:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Settings section, select Configure User Mapping Rules.

To enable or disable a rule, use the toggle on the left side of the rule. To delete a custom rule, select the trashcan icon.

Create a Custom Rule

To create a custom user mapping rule, follow these steps:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Settings section, select Configure User Mapping Rules.
4. From the Configure User Mapping Rules page, select + Create Custom Rule. A Create New Rule pop-up window will display.

5. Select your desired criteria for the custom rule. For more information, see the screenshot and list below:

   

   1. Vendor Criteria: Select the specific security vendor this rule should apply to, or All Vendors.
   2. Identifier criteria: Select which security vendor identifier to map.
   3. Operator criteria: Select if the identifier is the same as or contains the matching KnowBe4 User Data Field.
   4. KnowBe4 User Data Field: Select the user data field from KnowBe4 to map.
   5. Add Field: Add your selected criteria to the rule.
   6. Cancel: Cancel the creation of a new custom rule.
   7. Create Rule: Confirm your configuration and create the new custom rule.
6. Once you have added one or more criteria using the Add Field button, select Create Rule to save your changes.

Uploading a User Mapping CSV File

To map your users using a CSV file, you can use our provided CSV file template or your own custom CSV file:

• To use our downloadable CSV file template, log in to your KnowBe4 SAT console and navigate to Coaching > Setup > User Mapping Setup > User Mapping CSV. Then, select Example CSV to download the template.
• To use a custom CSV file for import, see the CSV File Fields section of this article.

Once you have prepared a CSV file for import, follow the steps below to import the CSV file and map your users:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Settings section, select User Mapping CSV. An Upload a CSV File pop-up window will display.
4. Select Browse and choose your CSV file.
5. Select Upload CSV.

CSV File Fields

To map your users using a custom CSV file, you'll need to add your users' information first. For more information about available CSV field types, see the table below:

Using the Unmapped Vendor Data Report

The Unmapped Vendor Data Report displays unmapped event and identifier data from your vendors. These are events and identifiers from your integrated vendors that are not currently mapped to a user in your KnowBe4 SAT console. You can use this information to map new users or update mappings for existing users, then rerun user mapping to connect events to users.

There are two report types for the Unmapped Vendor Data Report:

• Unmapped Events Report Type
• Unmapped Identifiers Report Type

For more information, see the subsections below.

Unmapped Events Report Type

To view Unmapped Events in your Unmapped Vendor Data Report, follow these steps:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Reports section, select Unmapped Vendor Data Report.

4. From the Report Type filter, select Unmapped Events. For more information about the Unmapped Events report type options, see the screenshot and list below:

   

   1. Report Type: Select between displaying Unmapped Events data or Unmapped Identifiers data.
   2. Vendor: Select one or more vendors to display event data for.
   3. Date Range: Select the date range to display data for.
   4. View Report: Generate report data from your selected criteria.
   5. Generate CSV: Generate a CSV file of the report.
   6. Add or Remove Columns: Customize which columns are displayed in the table.

   7. Rerun Event Mapping: Rerun user mapping and map the events to users.

      Tip:We recommend mapping additional users before selecting this button.
   8. View Event Mapping Reruns: Select this text to view your history of user mapping reruns.

Unmapped Identifiers Report Type

To view the Unmapped Identifiers report type in your Unmapped Vendor Data Report, follow these steps:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Reports section, select Unmapped Vendor Data Report.

4. From the Report Type filter, select Unmapped Identifiers. For more information about the Unmapped Identifiers report type options, see the screenshot and list below:

   

   1. Report Type: Select between displaying Unmapped Events data or Unmapped Identifiers data.
   2. Vendor: Select one or more vendors to display event data for.
   3. Date Range: Select the date range to display data for.

   4. Identifier Type: Select the type of vendor identifier to display data for.

      Note:An Identifier Type must be selected to generate report data.
   5. View Report: Generate report data from your selected criteria.
   6. Generate CSV: Generate a CSV file of the report.
   7. Add or Remove Columns: Customize which columns are displayed in the table.

   8. Rerun Event Mapping: Rerun user mapping and map the events to users.

      Tip:We recommend mapping additional users before selecting this button.
   9. View Event Mapping Reruns: View your history of user mapping reruns.

Once you have generated the Unmapped Identifiers data, you can connect these identifiers to your users. To connect unmapped vendor identifiers to your KnowBe4 SAT users from the Unmapped Identifiers report type, see the steps below:

1. In the Identifier table column, navigate to the identifier and select + Connect KSAT User Email. A Connect KSAT User Email pop-up window will display.
2. From this pop-up window, use the KSAT Email Address field to search for the KnowBe4 SAT user you wish to connect to the vendor identifier.
3. Select OK to confirm.

Mapping Recommendations

Real-Time Coaching makes recommendations for mapping your KnowBe4 SAT users to various identifiers. To view your recommendations, use the Automatic Device Discovery feature, our user mapping recommendations, and the Discovered Users Report.

For more information about these recommendation options, see the subsections below.

Automatic Device Discovery

The Automatic Device Discovery feature automatically maps users to devices using the data from your integrated vendors. You can then review these mappings on the Review Mapped Users page.

To enable Automatic Device Discovery, follow the steps below:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Settings section, enable Automatic Device Discovery by selecting the toggle on the right side of the page.

User Mapping Recommendations

Our user mapping recommendations help map your users to various identifiers. You can accept or reject these recommendations.

To review your user mapping recommendations, follow the steps below:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.

3. In the Recommendations section, select User Mapping Recommendations. For more information about your user recommendation options, see the screenshot and list below:

   

   1. + Filters: Filter the list of recommended mappings by Active Users, Archived Users, or Confidence Score.
   2. User Mapping Recommendations Table: Lists mapping recommendations by Confidence Score. The confidence score is a number between 0 and 100, with higher scores indicating greater confidence that the match is correct. For each recommendation, you can see the email, first name, last name, status, and confidence score of the email being recommended for mapping to the alias.
   3. Approve Selected: Approve the selected mappings in the table.
   4. Reject Mapping: Reject the selected mappings in the table.

Discovered Users Report

The Discovered Users Report displays users who might not yet be in your KnowBe4 SAT console, based on data from your integrated vendors. This report is enabled by default.

To view the Discovered Users Report, follow the steps below:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. Select Discovered Users.

View Your Mapped Users

Once you have mapped your users, you can view those mappings at any time by following the steps below:

1. Log in to your KnowBe4 SAT console.
2. Navigate to Coaching > Setup > User Mapping Setup.
3. In the Reports section, select the Review Mapped Users button.

To edit a mapped user's identifiers, select the three dots icon in the Actions column, then select Edit.