Directory Synchronization - Integrations

This article contains information on displaying and manually synchronizing directory synchronization integrations in the Mimecast Administration Console, detailing steps for accessing integration details and initiating a manual sync.

You can display your directory synchronization integrations in the Mimecast Administration Console.

To list your directory synchronization integrations:

1. Log in to the Mimecast Administration Console.
2. Select the Users & Groups | Directory Synchronization menu item.
3. Click on an Integration to display its details. The exact detail displayed for integration depends on the integration type (e.g., On-Premises Active Directory (LDAP), Microsoft Azure, Domino Directory, Google Directory). The following example is from an On-Premises Active Directory (LDAP) integration.

Manual Synchronization

Although your connections automatically synchronize with your Active Directory three times daily, you can manually start a synchronization.

To start a manual directory synchronization:

1. Log in to the Mimecast Administration Console.
2. Click on the Users & Groups | Directory Synchronization menu item. The directory synchronization connections are listed.
3. Click the Sync All button.

Considerations for Disabled or Errored Integrations

When a directory synchronization integration is disabled, all destructive synchronization actions are paused across all integrations on the account — not just the disabled one. Destructive actions include:

• Removing users from directory groups.

• Changing user address types (e.g., from Extracted From Directory to Created by Message in Transit).

• Deleting or purging user accounts.

This behavior is by design. It protects your account from unintended data loss during temporary maintenance windows, such as migrating to a new directory provider or troubleshooting a connection issue.

The same behavior applies to integrations in an error state.

Optimization:

• Only disable an integration temporarily (e.g., during planned maintenance or migration).

• If an integration is no longer needed, delete the connection rather than leaving it in a disabled state. A disabled integration that is left indefinitely will continue to block destructive sync actions for all other active integrations on the account.

To delete an integration:

1. Log in to the Mimecast Administration Console.

2. Navigate to Users & Groups | Directory Synchronization.

3. Select the integration you want to remove.

4. Delete the connection.