Overview and Configuration Guide: Integrating KnowBe4 KSAT with Gradient
Overview
This integration enables partners to synchronize the latest active user counts from their KnowBe4 customer accounts, ensuring accurate billing based on the actual number of active users rather than the originally ordered seat count.
Note: The KB4 Partner API does not provide any metadata to identify which customers have purchased add ons like PhisherPlus, SecurityCoach, or CompliancePlus.
How to Connect with KnowBe4 KSAT
To configure and connect the KnowBe4 KSAT integration, please select from the following:
Requirements
To connect with the KnowBe4 integration in Reconcile, you’ll need:
-
API Key
-
API URL
When submitting API requests, you will need to use the correct API URL:
- US server: https://training.knowbe4.com/graphql
- EU server: https://eu.knowbe4.com/graphql
- CA server: https://ca.knowbe4.com/graphql
- UK server: https://uk.knowbe4.com/graphql
- DE server: https://de.knowbe4.com/graphql
How to Generate API Keys
- Login to your KnowBe4 Management Console with your administrator credentials.
- Once logged in in, click on Account Settings in the user settings dropdown.
- In Account Settings, click on API Keys: Manage your API Tokens.
- Click Create New API Token.
- Select the Read Only scope and set the expiration date as far in the future as possible.
- Complete any additional required details and click Create Token to generate a new API key.
Connect KnowBe4
- Login to Gradient.
- Navigate to the Integrations tab.
- Select the KnowBe4 integration and click Connect.
- Enter the API Key and API URL retrieved from the previous steps.
- Click Authenticate.
- Once successfully authenticated, accounts and services will be generated, and the integration will be updated to a pending status. You can click the status refresh button or simply refresh your browser if you are unable to proceed to the next step.
Map Accounts and Services
Note: If you need further details on account and service mapping, click here.
-
Map Accounts and Services
- When setting up the integration for the first time, accounts are automatically matched if there's an exact name match between your vendor and PSA.
- For accounts not automatically matched:
- Use the filter button beside the account names on the right, or
- Use the search bar on the left to find PSA accounts.
- Drag and drop the PSA accounts from the left to match them with vendor accounts on the right.
-
Proceed to Service Mapping
- Once accounts are mapped, click "Next" to access the Service Mapping step.
- Match services or products from your PSA, displayed on the left, with the corresponding vendor services or SKUs on the right. For ConnectWise PSA users, you can also search by Product ID.
- Ensure at least one account and one service mapping is completed to finish the configuration.
- After mapping the services, click "Next".
-
Finalize Configuration
- Review your mappings and click "Finish" to complete the setup.
- This will start a sync. The "Sync Status" indicator at the top-right will start spinning, showing that a sync is in progress.
- Once the sync is complete, the "Refresh" button will light up pink, indicating the sync is complete. Click that button to see the vendor data filled out.
- Use the filter or sort options to jump to the connected services and start reviewing and reconciling!