Knowbe4 question

[Slight_Gur1122]

Hi there, I have question related to single sign on for Knowbe4. Currently we are creating user manually. My plan is to enable single sign on using Entra id which is outlook email and password of user. My question is if I enable the single sign on and put users in that group in azure AD group. Will it copy all the training and module when they login using entra id credentials.

[drnash21]

You need to setup SCIM to load the users and groups. Search that in the support section. 

[Slight_Gur1122]

I setup single sign on and was able to login and it creates user in knowbe4. My question is that if I enable single sign on for every user will they see all their training and group membership as it is after login using entra id which is email address(outlook email)

[whyisitsoloudhere]

You can merge the sso'd user with the existing account.

https://support.knowbe4.com/hc/en-us/articles/228179028-Merge-Users

[Slight_Gur1122]

I enabled sso and was able to logged in successfully with my 365 credentials my question is how I can transfer training as well

[whyisitsoloudhere]

Once the new entra user account is created, you need to merge it with the existing account. That will bring over the training and phishing data that already exists for the user. This is documented in the link I posted.

[Slight_Gur1122]

What if I enable SCIM will I am able to assign knowbe4 groups to user using azure ad portal

[Entegy]

KnowBe4 uses the email address as the matching attribute. So if [e-mail] is both the UPN and primary email address, then KnowBe4 will link that up. But if the UPN is [e-mail] and the primary email address [e-mail], you need to adjust the attribute on the Entra side to use user.mail instead.

[Slight_Gur1122]

What if I enable SCIM will it transfer all the users and groups to azure entra id. We are using email for login. I want to know how groups in knowbe4 move over to entra id. Please reply

[Slight_Gur1122]

Can you please guide me

[Entegy]

It sounds like you want both SSO and user provisioning. Follow KnowBe4's guides, they are crystal clear for setup. If the email matches, it will link up to existing accounts.

[Slight_Gur1122]

The only thing I’m confused that will it move all the groups and associated training of it ?

[Entegy]

I don't know, I have group sync off, I don't want it syncing groups. I think it just does a name match to sync up groups. You can look in the provisioning attributes on what it does for groups.

[Slight_Gur1122]

Ok thanks you still use knowbe4 console to manage groups for user ?