Get Jericho Security Fully Operational: Setup Guide

This page walks you through the three steps required to get Jericho Security fully operational: ensuring simulation emails are delivered accurately, adding your employees to the platform, and enabling your employees to report suspicious emails.

Ensure delivery and accuracy

Jericho Security’s phishing simulation emails are intentionally crafted to look suspicious, which means email security systems may block, quarantine, or modify them. To improve delivery and reduce interference with simulation results, you need to whitelist Jericho Security’s emails, links, and attachments.

Without whitelisting, your email security tools may:

• Block or flag simulation emails as spam or phishing
• Open attachments in a sandbox environment
• Inspect and alter links, which can falsely record a click even when the employee did not interact with the email

Where to configure whitelisting

You should configure whitelisting in each of the following systems your organization uses:

• Email providers (e.g., Microsoft 365, Google Workspace) — for both spam and phishing categories
• Email security tools (e.g., Proofpoint, Mimecast, Abnormal Security, Microsoft Defender)
• Web application firewalls (optional) — in rare cases, firewalls may interfere with link tracking

IP ranges to allow

For standard Jericho email delivered through Amazon SES, use 24.110.88.85 and 24.110.88.86. See the allowlisting overview for verification date, scope, and CIDR equivalents.

Note

Use provider-specific rules with the campaign identifiers confirmed by Jericho Support. Separate allowlists may not combine their conditions. For step-by-step instructions specific to your email platform or security tool, see the Whitelisting Guide.

Add employees

Employees are the users who receive phishing simulation emails and training assignments. You can add them to Jericho Security using any of three methods.

Manually

1. Navigate to People & Groups in the platform.
2. Click Add employees.
3. Enter the employee’s information and save.

Use this method when you need to add a small number of employees one at a time.

CSV upload

1. Navigate to People & Groups.
2. Click People & groups via CSV, then use official templates here to download the templates.
3. Fill in the employee template with your data.
4. Keep the option to remove employees absent from the uploaded file turned off unless you intend to remove those employees.
5. Click Upload employees CSV, select your file, and review any validation feedback.

Use this method when you have a large number of employees to add but are not using a directory integration.

SCIM directory integration

Set up a SCIM 2.0 directory integration to automatically sync employees from your identity provider. Jericho Security provides integration guides for the following providers:

• Azure Entra ID Directory Integration
• Okta Directory Integration

Tip

Directory integrations are ideal for organizations that want to keep their employee list updated automatically as people join or leave.

Report suspicious emails

Empower your employees to take an active role in security by enabling them to report suspicious emails directly to Jericho Security using a one-click add-on for their email client.

When an employee reports a Jericho Security phishing simulation email using the add-on, that action is counted as a positive outcome and reflected in your dashboard and campaign reports.

Install the add-on for the email platforms your organization uses:

• Microsoft Outlook — deploy your organization’s report add-in
• Google Gmail — Report Phishing Add-on

Tip

Installing the report phishing add-on reinforces security awareness habits while improving the accuracy of your simulation metrics.

---

Have questions or need help with setup? Reach the Jericho Security support team at support@jerichosecurity.com.