IRONCLADHELP CENTERBack to Portal
All docs

Connecting Mimecast

Overview

Connecting Mimecast lets Ironclad pull in email security activity from your Mimecast account so it shows up alongside your other security data.

Before you start: You'll need administrator access to the Mimecast Administration Console with permission to create an API application.

Step 1: Create an API application in Mimecast

  1. Log in to the Mimecast Administration Console.
  2. Go to Administration > Services > API and Platform Integrations.
  3. Create a new API 2.0 application/API key.
  4. Copy the resulting Client ID and Client Secret — you'll need both in the portal, and the secret is typically shown only once.

Step 2: Connect it in the portal

  1. Log in to the Ironclad portal.
  2. Make sure the correct customer is selected in the scope bar at the top.
  3. In the left sidebar, under Administration, click Integrations.
  4. Find the Mimecast card and fill in:
Field Enter the Mimecast value for…
Client ID Client ID
Client Secret Client Secret
  1. Check the Enabled checkbox.
  2. Click Save. You'll see a brief Saved confirmation.

These fields are write-only credentials. Once saved, the portal shows a mask plus only the final three characters, so you can confirm which value is configured without exposing the full key. Re-enter a field only when rotating that credential.

Step 3: Confirm it's working

Once saved and enabled, Ironclad begins pulling Mimecast activity on a regular interval. Check your Ironclad SIEM dashboard for Mimecast events to confirm data is flowing — it can take a little while for the first events to appear.

Troubleshooting

  • No data after saving: double-check the Client ID and Client Secret were copied exactly, with no extra whitespace.
  • Authorization errors: confirm the API application in Mimecast is still active and hasn't been revoked or expired.