Skip to content
  • There are no suggestions because the search field is empty.

Allow EasyLlama Emails for Phishing Simulator in Google Workspace [Recommended]

To be sure you are set-up for success with our Phishing Simulator, we will require you to allowlist our messaging. Otherwise, Gmail can block our simulated phishing attempts so you will not get any emails sent out! This article outlines the DMI method.

 

DMI Setup Guide for Gmail 

For Google DMI to work: all emails should be in the Google Workspace. If your organization has more than one Google workspace, you must use SMTP, not DMI. See this guide: https://help.easyllama.com/allow-easyllama-emails-google-mail 

Note: You must be a Google Super Admin to complete these steps.

  1. In the EasyLlama Dashboard, go to Settings > Integrations

  2. Find Google DMI. Select Connect. See the Client ID and Auth scopes. 

  3. Open a new tab and navigate to admin.google.com.

  4. In the Google Workspace Admin console, select the Security > Access and data control section.

  5. Select the “API Controls” section.

API Controls section

 

6. Scroll down to the Domain wide delegation section, and click the "Manage Domain Wide Delegation" button.

Domain wide delegation

 

7. Click the "Add new" button.

Add new

 

8. In the Client ID field, enter the value from step 2

9. In the OAuth Scopes field, enter the value from step 2

10. Click the "Authorize" button.

11. In EasyLlama, click the "Verify Google DMI" button.

 

(Optional) DMI Whitelisting Guide

Although DMI reduces the need to whitelist for initial deliverability, you may have post-delivery email security tools that can still flag simulated phishing emails as spam and/or obfuscate phish email click reporting.

Sender Domains:

Here is our current list of sender domains for our phish simulation emails: 

  1. account-checker.com
  2. accountreset.cloud
  3. auth-identity.co
  4. auth-notify.tech
  5. easyllama.com
  6. login-alerts.co
  7. psm.easyllama.com
  8. reset-account.co
  9. secure-loginhub.com
  10. secureauthaccess.com
  11. verify-account.co