Email Security Cloud Integrated - Application Consent for Single Sign-On - May 2025

Service Update

Availability	May 6th, 2025
Product(s)	Email Security Cloud Integrated (CI)
Who's affected	All Email Security Cloud Integrated (CI) Users

Overview

Mimecast is pleased to announce a new Single Sign-On Application (SSO) for Email Security Cloud Integrated (CI) users with limited permissions. This new application will require consent to be granted for the continued successful use of SSO, and will require only basic permissions.

By moving SSO to a separate application with minimal permissions, we reduce security exposure that is associated with higher-permission applications and therefore enhance CI Email Application protection.

What's changing

• Current CI users will be prompted to grant consent to the new SSO Application via a link within the CI Console Home Page. There will be a four-week notice period, after which point it will be mandatory to grant consent to successfully use SSO for CI. Consent can be granted in the following ways, and will be a requirement for continued successful SSO authentication:
  • Consent can be granted by an administrator with the appropriate role. For more information, see Application Consent for Single Sign-On Authentication.
  • If Administrator consent is not granted, end users will be prompted to grant consent upon logging in to the CI Console.
  • New users signing up for Email Security Cloud Integrated will see an additional mandatory consent prompt during the signup process.

Deployment Schedule

Event	Date
Link Available in CI Console The link will become visible in the Cloud Integrated Home Page.	May 6th, 2025
New Application Rollout This date also marks the end of the four-week notice period to grant consent.	June 17th, 2025

Recommended actions

An administrator or an end user will need to grant application consent by using the link in the CI Console Home Page.

• To continue logging in with SSO seamlessly, we recommend that administrators provide consent within the four-week notice period.
• The prompt to provide consent will not reappear once consent has been granted.