You'll want to implment "LDAP Accept" for the inbound listener on your C-series appliance. Log into the Support Portal and download the AsyncOS Advanced User Guide.
The PDF goes into detail on how to set up ldap and use the LDAP Accept to validate email addresses against an Active Directory/domain controller.