Which protocols does Monosign support for KnowBe4?

This integration works over SAML 2.0. Monosign also supports SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, RADIUS, and Kerberos platform-wide — so the rest of your stack connects to the same identity plane alongside KnowBe4.

Can I enforce MFA on KnowBe4 logins?

Yes. Once KnowBe4 is behind Monosign, every login passes your MFA policy — TOTP, push, or phishing-resistant passkeys (FIDO2) — with adaptive step-up when risk signals change.

How long does setup take?

For most teams, connecting KnowBe4 takes under an hour: the template is pre-built and the steps are documented. You can test it in a free trial tenant without touching production.

Is KnowBe4 access revoked automatically when someone leaves?

Yes. Joiner-mover-leaver lifecycle grants KnowBe4 access by role and revokes it the day someone leaves — no stale accounts, and the audit trail is ready for review.

Talk to sales

Become a Partner

Start Now

Integration · Security & IT

KnowBe4 Single Sign-On with Monosign

KnowBe4 is the world’s largest integrated security awareness training and simulated phishing platform.

Put KnowBe4 behind your identity plane: one login, MFA enforced, access granted and revoked automatically with the joiner-mover-leaver lifecycle — and every authentication logged, tamper-evident.

Supported protocols:SAML 2.0

Start free trial →Browse the help center

Spin up a full trial tenant in five minutes and connect KnowBe4 today — no credit card, no sales call.

Setup

KnowBe4 to production in three steps.

A dedicated KnowBe4 article is on its way. The generic setup guides in our help center cover the same flow, and the in-console template does most of the work. Browse the help center →

01
Add KnowBe4 in Monosign
Pick the KnowBe4 template from the application catalog in the Monosign console. The SAML configuration — metadata, certificates, endpoints — is generated for you.
02
Establish trust on the KnowBe4 side
Paste the metadata/client details Monosign generated into the KnowBe4 admin panel. The help-center article shows every field.
03
Test, then roll out
Sign in end-to-end with a test user, then govern access with Monosign groups and policies. Every login is MFA-enforced and logged.

Trusted by enterprises worldwide

50M+

identities secured

7,000+

enterprise integrations

40+

countries

FAQ

Common questions.

Which protocols does Monosign support for KnowBe4?: This integration works over SAML 2.0. Monosign also supports SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, RADIUS, and Kerberos platform-wide — so the rest of your stack connects to the same identity plane alongside KnowBe4.
Can I enforce MFA on KnowBe4 logins?: Yes. Once KnowBe4 is behind Monosign, every login passes your MFA policy — TOTP, push, or phishing-resistant passkeys (FIDO2) — with adaptive step-up when risk signals change.
How long does setup take?: For most teams, connecting KnowBe4 takes under an hour: the template is pre-built and the steps are documented. You can test it in a free trial tenant without touching production.
Is KnowBe4 access revoked automatically when someone leaves?: Yes. Joiner-mover-leaver lifecycle grants KnowBe4 access by role and revokes it the day someone leaves — no stale accounts, and the audit trail is ready for review.

More integrations