LDAP Configuration

LDAP configuration for Mimecast services

LDAP configuration in Mimecast can help to improve productivity by enabling you to securely automate the management of Mimecast users and groups using your company directory. As you prepare to move your email flow to Mimecast, you can use the Mimecast Directory Sync tool for LDAP integration with email clients that include Microsoft Office 365, Microsoft Outlook and Microsoft Exchange to eliminate the administrative burden of managing Mimecast users and groups manually. LDAP configuration will also enable you to take full advantage of Mimecast features and reduce the time required for configuring and maintaining services. 

Mimecast options for LDAP configuration

Mimecast Directory Sync provides a variety of LDAP configuration scenarios for LDAP authentication between Mimecast and your existing email client.

• Active Directory Sync with the Mimecast Synchronization Engine - this option uses the Mimecast Synchronization Engine and a secure outbound connection from your internal network to securely and automatically synchronize Active Directory users to Mimecast.
• Office 365/Windows Azure Active Directory - this LDAP configuration option is designed for organizations that are using Office 365 or that are already synchronizing an on-premises Active Directory to Windows Azure. Mimecast provides a cloud-to-cloud Azure Active Directory Sync to automate management of groups and users.
• LDAP Active Directory Sync - this option uses an inbound LDAP connection to automatically synchronize Active Directory users and groups to Mimecast. A firewall change is required to allow connectivity from your Domain Controllers to Mimecast.
• Domino Directory - for organizations using Domino Directory, Mimecast enables LDAP configuration through a sync feature to automate management of users and groups.

Troubleshooting LDAP configuration

When LDAP configuration does not work properly the first time, one of the following common errors may be the cause.

• Directory connection connectivity failure. If LDAP configuration does not enable Mimecast to connect to your organization's environment, the connection to the IP address that has been specified for the directory connector will fail in Mimecast and will be unable to synchronize with the directory server.
• Active directory credential failure. When a user account in the customer infrastructure does not match account details configured in the Mimecast Administration Console, the connection will fail and Mimecast will be unable to log on to synchronize the directory.
• Special character requirements. If attributes in your directory structure use special characters, you'll need to escape them by prefixing them with a backslash in the attribute string.

While Mimecast is designed for self-service troubleshooting, our helpdesk is available 24/7 to help with LDAP configuration and other issues.

Learn more about LDAP configuration Mimecast, and about Mimecast healthcare cybersecurity and eDiscovery solutions.