Skip to content
English
Sign in
Contact us
  • There are no suggestions because the search field is empty.

How do I configure Direct Message Injection (DMI) for Google?

Overview

Direct Message Injection (DMI) is a delivery method that allows Moxso to place simulated phishing emails directly into your employees' inboxes — without sending them through your regular email system. This  eliminates the need for IP and domain allowlisting and means the emails are guaranteed to arrive, regardless of your organisation's spam filters or security tools.

It also unlocks something traditional simulations can't do: because emails are injected directly rather than sent, Moxso gives you the flexibility to use any sender domain in a simulation — from trusted-looking internal addresses to domains that would typically be blocked or flagged by security tools — making for far more realistic and varied phishing scenarios.

The one thing to be aware of is that setting it up requires granting Moxso specific, limited access to your Google Workspace environment, which a Google Super Admin will need to authorize.

 

Prerequisites

Before configuring DMI, confirm the following:

  • You have Super Admin access to your Google Workspace Admin Console.
  • You have access to the Google Cloud Console (console.cloud.google.com).
  • You have admin access to your Moxso account.
  • You have set up a connection between your Google Workspace and Moxso under Integrations > Users and communication > Connect to Google.

 

Step 1 of 2 — Grant Domain-Wide Delegation

This step authorizes Moxso to deliver messages to your users' inboxes.

  1. Go to admin.google.com and sign in as a Super Admin
  2. Navigate to Security > Access and data control > API controls
  3. Under Domain-wide delegation, click Manage Domain Wide Delegation, then Add new
  4. In the Client ID field, enter the following Client ID: 100423388360933187272
  5. In the OAuth scopes field, enter the following scope exactly: https://www.googleapis.com/auth/gmail.insert
  6. Click Authorize

 

Note: The gmail.insert scope is the minimum permission required. It allows Moxso to place messages into inboxes but does not permit reading, sending, or deleting emails.

 

Step 2 of 2 — Activate DMI in Moxso

  1. Log in to your Moxso admin account and navigate to Settings > Simulations > DMI for Google Workspace
  2. Check the box “Confirm DMI activation”.
  3. Click Save settings to finalize the configuration.

 

image (4)