Email Security Setup Wizard - Onboarding - Consent-Based Domain Setup Integration for Microsoft 365

This article covers creating a Consent-Based Domain Setup Integration for Microsoft 365.

Overview

This integration allows Microsoft 365 customers to set up their domains within Mimecast using a secure, consent-based workflow. By leveraging Microsoft’s admin consent process, you can easily validate and manage your domains for Mimecast services.

Prerequisites

• The user creating this integration must have Global Admin permissions in their Microsoft 365 environment to provide consent for domain setup.
• The user must also have Read/Edit permissions within the Mimecast Integrations Hub.
• Customers using Microsoft 365 Mail Infrastructure with verified domains can add those domains to their Mimecast account as internal domains using this integration.

• Domains added via this integration are managed as internal domains in Mimecast.
• For successful onboarding, it is important to ensure that pop-up blockers are disabled prior to starting the onboarding journey.

Create a Consent-Based Domain Setup Integration

1. Log in to the Mimecast Administration Console.
2. Navigate to Integrations | Integrations Hub.
3. On the Consent-Based Domain Setup tile, select Configure New.
4. Choose Email Hosting Provider: Select Microsoft 365.
5. Select Your Environment:
   • Choose between Standard (Commercial) or GCC High.

Microsoft GCC High utilizes Microsoft's US Sovereign Cloud, which is only accessible to U.S. citizens with special clearances.

1. Initiate the Consent Process:
   • Click to provide admin consent.
   • Sign in as a Microsoft 365 Global Admin.
   • Review and accept the requested permissions.
2. Once consent is granted, Mimecast will retrieve your verified domains.
3. Select Domains to Add:
   • Choose which domains to add to your Mimecast account (multiple selections allowed).
   • The Microsoft 365 Tenant Domain is required and cannot be unselected. This ensures Mimecast can verify outbound communications from your Microsoft tenant using Microsoft’s default certificate and SMTP session information.

Important: Domains added via this process cannot be removed via self-service. Contact Mimecast Professional Services for removal.

4. In the Notification Configuration section, add email addresses, distribution lists, or distribution groups to receive notifications if the integration enters an error state.
5. Once your selections are complete, click Save.
6. The selected domains will now be added to your Mimecast account as verified internal domains.

Manage Consent-Based Domain Setup Integrations

1. Log in to the Mimecast Administration Console.
2. Navigate to Integrations | Integration Hub.
3. Click on the Consent-Based Domain Setup tile and select View.
4. You will be redirected to the Consent-Based Domain Setup Details page.
5. Click on the desired integration instance and select Edit.
6. You can now:
   • View the existing integration instance.
   • Select additional domains to add as internal domains.
   • Modify details such as the integration name, description, and notification configuration.
7. Once you are satisfied with your changes, click Save.

Delete a Consent-Based Domain Setup Integration

1. Log in to the Mimecast Administration Console.
2. Navigate to Integrations | Integrations Hub.
3. Click on the Consent-Based Domain Setup tile.
4. You will be redirected to the Consent-Based Domain Setup Details page.
5. Click on the desired integration instance and select Delete.

Deleting the integration instance does not remove the domains previously added via consent. For domain removal, please contact Mimecast Professional Services.

Additional Notes

• Domains added through this integration are managed as verified internal domains in Mimecast.
• The Microsoft 365 Tenant Domain is mandatory and cannot be removed or unselected.
• For any changes or removal of domains, reach out to Mimecast Professional Services.

If you have further questions or need assistance, please contact Mimecast Support.