Integrations

AfriPhish fits your existing stack — identity, learning, security telemetry, and email deliverability. Availability depends on your plan.

SAML single sign-on (Enterprise)

Let employees sign in with your identity provider (Microsoft Entra ID, Okta, Google Workspace). SP-initiated flow:

  1. Configure your IdP details under Settings → Single Sign-On (entity ID, SSO URL, x509 certificate, allowed email domains, default role, JIT toggle).
  2. Copy the SP ACS / entity / metadata URLs into your IdP.
  3. Users enter their work email → they're routed to your IdP → provisioned just-in-time on first login.

SSO users have no password and can't password-login. The default role assigned by JIT provisioning respects the same role ceiling as manual invites.

Clerk front-door authentication

On deployments fronted by Clerk, Clerk handles identity (sign-in, social login, and its own MFA). AfriPhish exchanges the Clerk session for an internal token, hydrating the user's profile from the Clerk Backend API. Clerk-authenticated customers use Clerk's own MFA; when the platform security policy enforces MFA, their Clerk session must satisfy it before access is granted. See MFA & account security.

SCIM 2.0 provisioning (Pro+)

Push user lifecycle from your IdP to AfriPhish automatically:

  1. Generate a SCIM bearer token under the SSO settings panel (shown once).
  2. Point your IdP's SCIM integration at the base URL …/scim/v2 with that token.

Supported: Users create / get / list (filter=userName eq) / PATCH / delete (soft-deactivate, preserving history). Provisioning respects your seat cap.

Users only. SCIM provisioning covers user lifecycle; group provisioning is not supported. Organise people into groups inside AfriPhish instead.

LMS connectors (Pro+)

Two directions:

  • xAPI (outbound) — configure your LRS endpoint + Basic auth under Settings → LMS. Training start/completion emit attempted / completed statements (with score and pass/fail) to {endpoint}/statements.
  • SCORM 1.2 (packaged) — export any module as a .zip importable into Moodle, Cornerstone, SuccessFactors, etc.

Deliverability — dedicated sending domains (Pro+)

Send simulations from your own verified domain so SPF/DKIM/DMARC pass and mail lands in the inbox. Add a domain under Settings → Deliverability, publish the generated DNS records (SPF, 3× DKIM CNAME, DMARC, MAIL-FROM), and activate once verified. For the full send path — managed provider, per-tenant SMTP, and domain setup — see Email & deliverability.

SecurityCoach telemetry (Enterprise)

Ingest risk signals from your EDR, secure web gateway, or email security. Generate a webhook token under Settings → Telemetry, then POST events:

curl -X POST https://api.afriphish.com/webhooks/telemetry \
  -H "Authorization: Bearer $TELEMETRY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "employee@yourcompany.com",
    "event_type": "malware_blocked",
    "severity": "high",
    "source": "crowdstrike",
    "description": "Blocked a malicious download"
  }'

Matched to a user by email, high/critical signals can trigger real-time coaching through your intervention rules.

Next: Email & deliverability.