Action Connector: KnowBe4

Set up the action connector for KnowBe4 to auto-enroll users into phishing training.

Overview

This configuration integrates KnowBe4 with Radiant Security to automatically enroll impacted users in additional phishing training. Users impacted by phishing attacks, either by clicking on malicious links or downloading malicious files, will be added to a KnowBe4 smart group and automatically enrolled in remedial training.

In this guide, you'll onboard the KnowBe4 action connector by completing the following:

• Create a Product API Token in KnowBe4
• Add a new Action Connector in Radiant Security
• Create a smart group from custom event criteria
• Create a remedial training campaign

Prerequisites

This configuration requires the following:

• You must have a Platinum or Diamond-level license to use the smart groups functionality
• You are an administrator of the KnowBe4 account

Create a Product API Token in KnowBe4

Create the Product API token to share with Radiant Security. The token will allow the app to authenticate to KnowBe4.

1. Login to your KMSAT console, click your email address at the top-right corner of the page and select Account Settings.
2. Navigate to Account Integrations > API.
3. Click User Event API.
4. On the Create New API Token page, fill in the Name field with Radiant Security App.
5. Click Create Token.
6. Under Key, click the copy icon to copy the API token you just created.

Note: Be sure to save the API token as it will be needed at a later step.

Add a new Action Connector in Radiant Security

Add the new action connector to Radiant Security.

1. Login to Radiant Security.
2. From the navigation menu, select Settings > Action Connectors.
3. Click + Add Connector.
4. Select KnowBe4 from the menu and click Credentials.
5. Under Required Credentials, add the following: User Event API: The Product API Token that you copied from the KMSAT console. Base URL:  Select the appropriate base URL depending on where your KnowBe4 account is located. From the drop-down, choose from the following options: US server (located at training.knowbe4.com): https://api.events.knowbe4.com/ EU server (located at eu.knowbe4.com): https://api-eu.events.knowbe4.com/
6. Click Add Connector to save the connector configuration.

Create a smart group from custom event criteria

Create a smart group in KnowBe4. When users match the custom event criteria, they will be automatically added to this smart group.

1. Log in to your KMSAT console and navigate to Users > Groups.
2. Click the + Create New Group button at the top-right corner of the page.
3. Enter a group name in the Group Name: Radiant Security Impacted User
4. Select the Make this a Smart Group checkbox.
5. Click Create Group. When you click this button, the Smart Group’s overview page will open.
6. From this page, click the Smart Group Criteria drop-down menu and select the criteria type Custom Event Criteria.
7. Fill in the criteria using the information below:
   1. Condition: Must
   2. Event Type: Radiant Security Impacted Users
   3. Event Source (optional): <blank>
   4. Event External Id (optional): <blank>
   5. Description (optional): Radiant Security enrolled user in training
   6. Matcher: Greater than
   7. Count: 0
   8. Time Frame: Any

Create a remedial training campaign

Finally, add the newly created smart group to a new or existing remedial training campaign. Follow the KnowBe4 documentation to complete these steps.

We value your opinion. Did you find this article helpful? Share your thoughts by clicking here or reach to our Product and Customer Success teams at support@radiantsecurity.ai 

Last updated: 2024-08-23