Applications - Registered Applications

This article contains information on managing registered applications in Mimecast, detailing how administrators can manage device authentication sessions, check software versions, and revoke access, with filtering options for operating systems and user sessions.

Registered applications are end-user devices where the users have registered with one of Mimecast's mobile, desktop, or continuity services. These include:

• Mimecast for Outlook
• Mimecast for Mac
• Mimecast Mobile

This guide describes the registered applications view that administrators with the Registered Applications role can use to:

• Manage device authentication sessions.
• Interrogate the device estate regarding Mimecast software versions.
• Look at the details of the device hosting the Mimecast application.

Overview

Information regarding the device, the application software, and registration details is provided for all users in your environment who have access to Mimecast applications. Administrators can determine whether certain devices require application software updates and identify devices that have not registered for an extended period of time. The registered applications view also provides the ability to revoke application authentication sessions.

To access the Registered Applications view:

1. Log in to the Mimecast Administration Console.
2. Navigate to Users & Groups | Applications.
3. Click on the Registered Applications button.

Filtering the Registered Applications View

You can filter the registered applications view by the following methods:

• View By drop-down
• Status drop-down

The View By drop-down has the following options:

• Operating System: This provides a list view of all registered authentication sessions.
• User: This groups all registered authentication sessions by email address.

The Status drop-down displays the status of the session created when applications register during the authentication process. The status column reflects the validity of the session:

• Active: The authentication session has been active in the time frame of the authentication TTL value set in the relevant authentication profile.
• Expired: The authentication session has not been in use in the time frame of the authentication TTL value set in the relevant authentication profile. Expired entries remain visible in the Administration Console for six months after they have expired.
• Revoked: An administrator has revoked the authentication session. Revoked entries remain visible in the Administration Console for six months after they have been revoked. Once an authentication session has been revoked, all Mimecast application data is removed and the user is logged out the next time the application is used. Tokens are revoked either manually (see the "Revoking a Registered Application's Access" section below) or automatically when the Mimecast Cloud Password for the user is changed. See the Enabling Mimecast Cloud Authentication page for more details.

Authentication sessions for web applications and portals are not reflected.

Viewing an Application's Version Information

You may need to interrogate the device estate to identify devices operating legacy or outdated versions of Mimecast applications. Registered applications provide this capability through the use of the Search, Application, and Version drop-downs.

An example may be that Mimecast announces the end of life of a major version of Mimecast for Outlook. You may want a report reflecting each user who needs to be updated to the latest version. Follow the steps below to provide this data:

1. Access the Registered Applications view.
2. Select an Applications Filter from the applications drop-down:

3. Select an application version from the versions drop down.

Only versions that have been in use in the organization will be reflected. If a user is upgraded to a newer version, and the authentication session is simply refreshed rather than a new session being created, the version information will be updated. The previous outdated version will no longer be reflected.

4. Results for the filtered view are displayed. These may be exported to a spreadsheet by selecting Export.

"Last Registration" reflects the date and time the authentication session was last registered with Mimecast. This may be useful for understanding when the device was last used.

Viewing Application / Version Information for Single User

If you want to interrogate the device estate to identify which Mimecast applications a specific user has accessed. Registered Applications provides this capability through the use of the Search field.

An example may be that you need a report on the Mimecast applications a specific user has accessed. Follow the steps below to provide this data:

1. Access the Registered Applications view.
2. Enter the user's User Name into the Search field.

3. Expand the accordion for the user. All authentication sessions for the user are displayed. These may be exported to a spreadsheet by selecting Export.

Revoking a Registered Application's Access

To revoke access to a registered application:

1. Access the Registered Applications view.
2. Either:

• • Select one or more registered applications in the left-hand column, and click on the Revoke Selected button to revoke those applications.
  • Click on the Revoke All button to revoke all registered applications.

See Also...

• Configuring an Authentication Profile