Skip to main content
We connect to your directory, formerly Azure Active Directory, and pull users on a daily cycle. If you would rather Entra ID pushed changes to us as they happen, see SCIM.

Preparing Active Directory

Before synchronising, set the data correctly in your AD. The best approach is to create a subgroup, also called a security group, containing the targets for the phishing campaign. As with a CSV import, targets always need an email address plus the Country and Language tags. These are the only ones mandatory for launching a campaign. To improve relevancy we advise adding Firstname, Lastname, Department, Seniority, Organisation, Industry, Function title and Gender. This improves targeting and personalisation: Firstname becomes a placeholder, Function title becomes a targeting tag.

Connecting Microsoft Azure

An initial connection between your AD and our platform is required.
Select I’m an Admin and log in with your professional account and AD admin credentials.
Importing from Microsoft is only supported for OutKept accounts registered with an email address that also exists on the Microsoft platform.
Once logged in as an admin, select your AD group and import it. If you cannot find it in the list, type the name in the field, which doubles as a search bar. After the connection is made, a preview of your data appears. Check that it looks correct and continue.

What we sync

Apart from the email address, we also sync the following directory attributes. The same set applies whether you use the daily Entra ID sync or SCIM provisioning.
Country and Language are mandatory. A user reaching us without them cannot receive simulations, so populate both in your directory before syncing.

Ongoing sync

Users sync daily. Anybody added to the synced group is added to the campaign automatically.

Next

Continue to Email delivery.