Understanding tenant statuses

In Stoïk Protect, each connected tenant (Microsoft 365 or Google Workspace) displays a status in the Phishing settings page. This status tells you whether the phishing module is fully operational, requires attention, or needs configuration.

This article explains what each status means, how it impacts your phishing campaigns, and what to do if action is required.

You can find tenant statuses in Phishing > Settings in Stoïk Protect.

Status overview

Old Status	New Status	Meaning	Impact on campaigns
Active	Active	All systems operational	Phishing fully operational
Setup pending	Pending	Email delivery configuration in progress	Campaigns cannot be sent yet
Setup failed Not set up	Delivery error	Email delivery is not configured or has failed	Campaigns cannot be sent
	Restricted	Additional permissions required for group sync	Employee groups are not synced
Unsynced	Disconnected	Directory connection lost	Employees not synced, campaigns paused

Active

Everything is working as expected. Employees are synchronized from your directory, groups are available for targeting, and phishing emails can be delivered directly to inboxes.

No action is required.

Pending

Email delivery is being configured. This usually takes a few seconds after completing the email deliverability setup.

Wait for the setup to complete. If the status does not change after 15 minutes, try refreshing the page or contact Stoïk support.

Delivery error

Email delivery is either not configured or the configuration has failed. Without it, phishing emails cannot be injected into employee mailboxes and campaigns will not work.

This status requires your attention. Go to Phishing > Settings and complete the email deliverability setup.

Possible causes:

• Email deliverability was never configured after connecting the tenant

• A previous configuration attempt failed

• Permissions were revoked on the email provider side

What to do:

1. Go to Phishing > Settings in Stoïk Protect

2. On the affected tenant, click on the button ... > Restart the configuration

3. Follow the email deliverability setup instructions

Restricted

Your tenant is connected and employees are synchronized, but Stoïk Protect is missing a permission required to sync employee groups from your directory (Google Workspace or Microsoft 365).

Phishing campaigns will still work for individual employees, but you will not be able to target specific groups.

To restore group sync, you need to re-authorize the connection and grant the additional permission.

What to do:

1. Go to Phishing > Settings in Stoïk Protect

2. On the affected tenant, click on the button ... > Restart the configuration

3. Sign in with an administrator account and accept the new permission

4. Once authorized, groups will sync automatically within a few minutes

Disconnected

The OAuth connection to your directory provider has been lost. This means Stoïk Protect can no longer synchronize employees or groups, and phishing campaigns are effectively paused.

This is the most critical status. No data is being synced and no campaigns can run until the connection is restored.

Possible causes:

• The administrator who authorized the connection has been removed from the organization

• OAuth permissions were revoked from the Google or Microsoft admin console

• The tenant was deleted or reconfigured on the provider side

What to do:

1. Go to Phishing > Settings in Stoïk Protect

2. On the affected tenant, click on the button ... > Restart the configuration

3. Sign in with an account that has administrator rights on the mailbox provider

4. Grant all requested permissions

Follow instructions of Phishing module setup

Once reconnected, employees and groups will begin syncing again, and campaigns will resume automatically.

Still need help?

If your tenant status does not resolve after following the steps above, contact Stoïk support at [email protected].