Email Security - API - Mail Flow Configuration

This article contains information on configuring mail flow for Email Security - API, including connecting to Microsoft 365, setting consent permissions, and defining the scope of live mail scanning.

Overview

Setting up your Mail Flow Configuration allows you to manage your mailboxes, to protect and route your organization's emails through Mimecast.

Considerations

• Mail Flow Configuration creates an Enterprise application in your Microsoft 365 tenant. 
• All policies are set to monitor-only by default, so mail flow is not affected during initial configuration. 
• The Mail Flow Configuration Wizard can be accessed under Account | Onboarding in the Mimecast Administration Console, for 90 days after account creation. 

Prerequisites

• You have a Mimecast Basic Administrator role or higher, for the Mimecast Administration Console. 
• You will need Microsoft 365 Administrator credentials with appropriate permissions. For details of required permissions, see Permissions Requested by Microsoft.
• Account Configuration must be completed before accessing Mail Flow Configuration. 
• Pop-up blockers must be disabled in your browser prior to starting the Mail Flow Configuration process, to ensure configuration is successful.

Configuring Mail Flow 

You can set up your Mail Flow Configuration for Email Security - API, by using the following steps:

1. Log in to the Mimecast Administration Console.
2. Navigate to Account | Onboarding | Mail Flow Configuration.

3. Click on Manage, within the Mail Flow Configuration card.

   

4.  Click on Connect with Microsoft 365. 

   

5. Sign in with your Microsoft 365 administrator credentials when prompted. 
6. The login window opens in a new browser tab or pop-up window.

7. Review and accept the requested permissions for the Mimecast Enterprise application. 

   

   The permissions requested allow Mimecast to read mail content and remediate threats by quarantining suspicious messages. For a detailed explanation of each permission, see Permissions Requested by Microsoft.

8. Select the scope of live mail scanning.
   Choose which mailboxes Mimecast will scan:

   • All mailboxes: Scans all mailboxes in your Microsoft 365 tenant.
   • Specific mailboxes: Scans only designated mailboxes or groups.
   
9. Click on Connect, to complete the configuration. 

Mimecast establishes the API connection to your Microsoft 365 environment, and begins monitoring mail flow.

See Also...

• Email Security - API - Overview
• Email Security - API - Onboarding (includes Permissions Requested by Microsoft)
• Email Security Deployment - MX Record-Based and API-Based Deployment