Skip to main content
KnowBe4’s KSAT APIs are available to Diamond-level and SAT Advanced customers. KnowBe4 has partner and multi-account organizations create Product API tokens in their management admin account, and StackOne does not support a token made there.

​
Find your region

Your region is the KnowBe4 data center that hosts your account, and it decides which address the console and the API use.

  • Look at the address in your browser while you are signed in to the KnowBe4 console.
  • Format: {subdomain}.knowbe4.com
  • Example: eu.knowbe4.com
  • training.knowbe4.com is US (training.knowbe4.com)
  • eu.knowbe4.com is EU (eu.knowbe4.com)
  • ca.knowbe4.com is Canada (ca.knowbe4.com)
  • uk.knowbe4.com is UK (uk.knowbe4.com)
  • de.knowbe4.com is Germany (de.knowbe4.com)
  • Select the matching option in the Region field in StackOne Hub.

​
Create a Product API token

A Product API token lets StackOne read your KnowBe4 account through the KSAT API. It is separate from the Reporting API token.

1

Sign in to KnowBe4

Sign in to your KnowBe4 console as an admin, at the address for your region.

  • Outside the US, use your region’s address instead, for example https://eu.knowbe4.com.
  • Click your email address at the top right of the page and select Account Settings.
  • Navigate to Account Integrations > API.
  • In the Product API section, click Product API to open the Product API subtab.
2

Start a new token

Click + Create New API Token.

  • Name: StackOne Integration
  • Products: KSAT
  • Scopes: Read Only. This field appears after you pick KSAT. StackOne only reads, so it never needs Read/Write, which KnowBe4 keeps for edits. If StackOne reports a permission error from KnowBe4, check that Products is KSAT and that the token’s User is a full administrator.
  • Set an Expiration Date. KnowBe4 asks for one on every token, and after that date the token stops working and the connection fails until you paste a new token.
  • Set User to a full administrator, the user KnowBe4 makes responsible for managing this token.
  • Set Status to enabled.
3

Create and copy the token

Click Create Token. In the Product API Token window, click the token to copy it, store it securely for use later, then click OK.

  • KnowBe4 says “After you close this window, you will not be able to view this token again.” The token is shown once. Later you can see only its last 10 digits, so a lost token needs a new one.
  • Paste it into the Product API Token field in StackOne Hub.

​
Replace or revoke the token

Manage the token on the Product API subtab under Account Integrations.

  • To revoke it, click the drop-down arrow in the Actions column and select Delete. The connection stops working.
  • To pause it, select Edit, set Status to disabled and click Update Token.
  • To replace an expiring token, create a new one the same way before the Expiration Date and paste it into the Product API Token field in StackOne Hub.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Region
  • Product API Token
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account on your Accounts page.