API & Integrations - Direct Message Injection

This article contains information on configuring Mimecast's Direct Message Injection (DMI) integration for Phishing simulations, for Mimecast Awareness Training, and Engage.

Overview

The integration with Mimecast's Direct Message Injection enables Phishing simulation emails to be delivered directly into users' inboxes, bypassing traditional email security controls.

Considerations

• This feature is only available to Mimecast Awareness Training and Engage customers for Email Security Cloud Gateway.

Prerequisites

• Mimecast Engage subscription.
• You must have one of the following roles:
  • Global Sys Admin.
  • Sys Admin - SD Full.
  • Super Administrator.
  • Full Administrator.
  • Basic Administrator.
  • Partner Administrator.
  • Custom Role with Integrations Marketplace (Read/Write permissions must be enabled.)
• You are a Microsoft 365 or Google Administrator.

Configuring the Direct Message Injection Integration

You can configure the Engage integration with Direct Message Injection by using the following steps:

1. Log in to the Mimecast Administration Console for Email Security Cloud Gateway.

2. Navigate to Integrations | Integrations Hub.

      

3. From the available Integrations, select Mimecast Direct Message Injection, and click on Configure New.

   
4. Complete the Details section: 
   • Enter an Application Name.
   • Enter a Description (optional).
   • Ensure you have selected an Email Provider to specify where you want to enable Direct Message Integration.

Up to 25 connectors per integration is supported.

Microsoft Authorization Flow for Direct Message Injection 

These steps continue from the previous workflow.

1. Select Authorize to complete the integration process.
2. You'll see the following banner: "Starting authorization flow for Mimecast Direct Message Injection. You will be redirected to an authorization flow to allow Mimecast to access Mimecast Direct Message Injection".
3. Log in to your email provider as an administrator when prompted.
4. Allow the permissions requested, when prompted, e.g.: 

9. You'll see the following banner: "Successfully authorized with Mimecast Direct Message Injection! Saving the authorization along with your Mimecast Integration...", followed by "Integration was successfully created!".

 

Google Authorization Flow for Direct Message Injection 

For the Direct Message Injection integration using Google, you will need to configure domain-wide delegation in your Google Workspace admin console:

Delegate Domain-wide Authority to your Service Account

To access user data on a Google Workspace domain, the service account that you created needs to be granted access by a super administrator for the domain. For more information about domain-wide delegation, see Control Google Workspace API access with domain-wide delegation.

To delegate domain-wide authority to a service account:

1. From your domain’s Admin console, navigate to Main menu | Security | Access and data control | API controls.
2. In the Domain wide delegation pane, select Manage Domain Wide Delegation.
3. Click Add new.
4. In the Client ID field, enter the client ID obtained from the service account creation steps above.
5. In the OAuth Scopes field, enter a comma-delimited list of the scopes required for your application. 
   • Use the scope https://www.googleapis.com/auth/gmail.insert.

6. Click Authorize.

For more information, see:  Perform Google Workspace domain-wide delegation of authority.

Q:	What happens if there are issues completing the Direct Message Injection integration?
A:	Banners will automatically alert you to DMI integration issues at the top of the Program Overview, Phishing Dashboard, and Phishing Campaigns pages. This will suggest you either toggle off DMI as your delivery mechanism or visit the Integrations Hub for details and resolution. Banners will include a hyperlink to the Integrations Hub for easy remediation.

See Also...

• API & Integrations - The Integrations Hub for Cloud Gateway
• Engage - Direct Message Injection
• Engage - Direct Message Injection - FAQ
• Awareness Training - Direct Message Injection
• Awareness Training - Direct Message Injection - FAQ