Docebo

Connect Docebo to collect security training evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Docebo:

   1. Sign in to Docebo as a Superadmin. If the API and SSO app is not active yet, activate it from Apps & Features (vertical tab Docebo Additional Features).
   2. Click the gear icon in the top right to open the Admin menu, find the API and SSO section and select Manage.
   3. Open the API Credentials tab and click Add OAuth2 App.
   4. Fill in the app name and description, set the Client ID, note the auto-generated Client secret, enter a Redirect URL, check the grant types (click Show advanced settings if needed) and click Confirm.
   5. Activate the app by clicking its checkmark icon (it turns from grey to green).
   6. Get an access token for the API with scope api from https://<subdomain>.docebosaas.com/oauth2/token using that client. Alternatively open https://<subdomain>.docebosaas.com/api-browser/, click OAuth on any endpoint, click Authorize, click Authorize again in the Authorization required dialog, and copy the token from the Token field.

   Where to find the other values:

   • Subdomain: Your platform address, https://<subdomain>.docebosaas.com; enter the part before .docebosaas.com.

   Docebo's public documentation does not cover every step.

   Source: developer.docebo.com, developer.docebo.com, developer.docebo.com, help.docebo.com, checked 2026-10-07.

   The permissions Safeguard needs: api, users and enrollments: read.

2. On Compliance › Connectors, open Docebo, click Connect, choose API token and fill in:

   Field	What to enter
   Subdomain	Required. The part before .docebosaas.com in your address.
   Access token	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Docebo and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Security Training connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks