Adaptive offers two methods for sending phish simulations: SMTP and DMI. Review this article to decide which is best for your organization.
⚠️ If your organization has more than one workspace, you must use SMTP, not DMI. See our guide: Setting up SMTP to Send Phishing Simulations.
DMI Whitelisting Guide
Although DMI reduces the need to whitelist for initial deliverability, some Adaptive customers have post-delivery email security tools that can still flag Adaptive phishing emails as spam and/or obfuscate phish email click reporting.
We recommend whitelisting us by header for all of the vendors you use. If your vendor requires whitelisting by domain instead of header, we have also included our current sender domains below.
Email Header:
Key: X-Adaptive-Bypass
Value: adaptive
Sender Domains:
Adaptive may add new sending domains and we will notify customers when changes are made. Here is our current list of supported domains for our phish simulation emails.
DMI Setup Guide
DMI Setup Guide for Microsoft
Note: You must be a Microsoft Global Administrator to complete these steps.
In the Adaptive Admin Portal, go to Settings > Phishing > Phishing Simulation Delivery Method.
Select the “Direct Message Injection (DMI)” button and then “Setup Microsoft DMI.”
Open a new tab and sign into Microsoft 365 Admin Center.
Return to Adaptive and click the “Verify Microsoft 365 DMI” button to complete setup.
DMI Setup Guide for Google
Note: You must be a Google Super Admin to complete these steps.
In the Adaptive Admin Portal, go to Settings > Phishing > Phishing Simulation Delivery Method.
Select the “Direct Message Injection (DMI)” button and then “Setup Google DMI.”
Open a new tab and navigate to admin.google.com.
In the Google Workspace Admin console, select the Security > Access and data control section.
Select the “API Controls” section.
6. Scroll down to the Domain wide delegation section, and click the "Manage Domain Wide Delegation" button.
7. Click the "Add new" button.
8. In the Client ID field, enter: field value is specific to your Adaptive account
9. In the OAuth Scopes field, enter: copy values from your Adaptive account
10. Click the "Authorize" button.
11. In Adaptive, click the "Verify Google DMI" button.
