[Email DLP] What to Do If Synchronization Between Address Groups and Groupware Fails?

Questions

Upon receiving a notification of synchronization failure (synchronization stopped) addressed to the administrator, I confirmed in the "Address Groups" section of the Administration that synchronization has failed. Please advise on how to address this situation.

Answer

If Group Sync with Email DLP and Microsoft 365 or Google Workspace fails, a notification will be sent to the administrator with the following titles:

【HENNGE Email DLP / Directory Sync Error】Notification of synchronization failure / Synchronization error has occurred.
【HENNGE Email DLP / Directory Sync Error】Notification of synchronization stop / Synchronization has stopped.
※ It will be sent with one of the above titles.

In this case, since the application status of the Address Groups is not up-to-date, please try the countermeasures in order by referring to the confirmation flow.

Confirmation Flow

① Turn off Auto Sync and try manual synchronization

1. Click the "Auto Sync" switch and change from "Enabled" to "Disabled"
2. Click "Sync Now"

If no error occurs on the screen, proceed to "⑤ Turn on Auto Sync".
If the error persists, proceed to the next step by referring to the flow.

② Check for duplicate Group Names

Check the group settings on both the groupware side and the Email DLP side to ensure there are no duplicate Group Names.
This includes not only duplicates on the groupware side but also duplicates with the Email DLP side.
For example, Group Names used in Address Groups that are not synchronized with Email DLP cannot be duplicated with Group Names on the groupware side. Please change one of the Group Names.

③ Check settings (Google Workspace only)

1. Access the [Google Admin Console] of Google Workspace.
2. From the menu list, click [Security] - [Access and Data Management] - [API Controls].
3. Click [Manage Domain-wide Delegation].
4. From the API client tab, select the API client set for Email DLP (such as HENNGE Email DLP) and click "Show detail".
5. Confirm that the Client ID and Scopes are set as follows.

Client ID

102937852759751394212

Scopes
※ Two types of scopes are set

https://www.googleapis.com/auth/admin.directory.group.readonly
https://www.googleapis.com/auth/admin.directory.user.readonly

④ Perform re-synchronization

Click "Reconfigure Route" from the Integration Settings on the Email DLP side.

Microsoft 365

1. Click the [Reconfigure Route] button in the left menu [Tenant Settings] - [Integration Settings] of the Email DLP Administration.
2. Confirm that the Microsoft 365 login screen is displayed.
3. Enter the information of the global admin account on the Microsoft 365 login screen.
4. Click [Accept] on the [Requested Permissions] screen.
5. Confirm that the screen transitions to the [Integration Settings] page of the Email DLP Administration.
6. If "Group Sync with Microsoft Entra ID" is displayed as Enabled on the [Integration Settings] page of the Email DLP Administration, the setup is complete.

Google Workspace

1. Click the [Reconfigure Route] button for [Group Sync with Google Workspace].
2. Enter the email address of the privileged administrator of Google Workspace and click [Next].
3. If it is displayed as Enabled on the [Integration Settings] page, the integration is complete.

⑤ Turn on Auto Sync

Click the "Auto Sync" switch and change from "Disabled" to "Enabled".
If the issue recurs after starting Auto Sync, please refer to the confirmation flow again to check the settings.
※ If errors persist after trying the confirmation flow, please contact support.

FAQ

Q: I want to change the administrator address for notifications
A: Please refer to the following Help Center article for changes
[Email DLP] Check Tenant Settings - General Settings

Q: What happens while synchronization is failing?
A: Filtering is done based on the settings of the last synchronized group.

Q: No notification was sent at the time synchronization was said to have failed.
A: If synchronization fails during Auto Sync, retries will be performed for a certain period. To prevent notification messages from HENNGE Email DLP from being marked as spam, notifications will not be sent during retries even if failures continue.

Q: I turned on Auto Sync, but synchronization has not started.
A: The execution timing does not depend on the date and time when Auto Sync was turned on. Please wait a moment as it depends on the execution timing adjusted by the system.

Q: Are there any concerns such as stopping email delivery when performing "④ Perform re-synchronization"?
A: There are no particular concerns.
Filtering is performed based on the last successfully synchronized group. Email delivery will not stop.

Q: Auto Sync is set, but it seems that Auto Sync is not being executed.
How should I deal with it?
A: If Auto Sync fails a certain number of times, the system will automatically stop Auto Sync. Please review the synchronization settings.

Q: Can I stop notifications?
A: Notifications for synchronization failures cannot be stopped.
Please turn off Auto Sync until synchronization improves or review the synchronization settings.

Q: What is the content of the notification?
A: The text of the notification to the administrator is as follows.
■ Normal synchronization failure notification

■ Synchronization stop notification
※ If Auto Sync repeatedly fails and does not improve, the service may stop synchronization.