Cohort 1 · SAT-led legacy

Verified 2026-04-27 · Decays 2027-10-27

SCIM is one-way at KnowBe4. Moxso reverse-syncs risk.

Them · KnowBe4 · SCIM 2.0, one-way

Standards-based provisioning, Silver tier and up.

  1. 01 Configure SCIM endpoint (Entra, Okta, Azure AD)
  2. 02 Map standard user attributes (name, email, group)
  3. 03 Users sync from IdP into KnowBe4
  4. 04 Risk-weighted attributes stay inside KnowBe4
  5. 05 No reverse-sync of risk to IdP

One-way provisioning

Us · Moxso · SCIM 2.0, bidirectional

SCIM 2.0 with risk-attribute reverse-sync to IdP.

  • SCIM 2.0 endpoint

    Native

  • User provisioning

    From IdP

  • Group-attribute mapping

    Yes

  • Risk-attribute reverse-sync

    To IdP

  • Downstream policy

    Risk-aware

Bidirectional provisioning