Skip to main content
Direct Message Injection (DMI) delivers simulation emails straight into inboxes through Google’s Gmail API. It bypasses Google’s email filters entirely, which means no IP-based whitelisting is needed at all.
Prerequisites: a Google Workspace tenant and a Super Admin account.Limitation: DMI does not support alias email addresses.

Configure Google Workspace

1

Sign in as Super Admin

Go to admin.google.com and sign in with a Super Admin account.
2

Open API controls

Navigate to Security then Overview then API controls.
3

Manage domain wide delegation

Under Domain wide delegation, click Manage Domain Wide Delegation, then Add new.
4

Enter our client ID and scope

The scope must match exactly. Click Authorize.

Configure the platform

1

Open the whitelisting settings

In the OutKept platform, go to Settings then Whitelisting.
2

Enable DMI

Find Google Direct Message Injection (DMI) and toggle Enable.
3

Send a test

Enter a test email address and click Send test email.
4

Confirm

Once the test email has arrived, toggle DMI on and click Save changes.

Then what

Have other security products enabled? Whitelist them now. Once everything that applies to your environment is whitelisted, send a test email from the platform and confirm every interaction is recorded. See Testing your whitelisting.

Troubleshooting

Disconnecting

1

Disable it on the platform

Turn DMI off in the platform settings.
2

Remove the delegation

In Google Admin, go to Security then API controls then Manage Domain Wide Delegation, find the client ID and remove it.