While configuring your Gmail deployment using the Password Management approach, you can choose to retain or not retain the Google password in the Workspace ONE database.

The non-compliant devices are blocked depending on whether you chose to retain the password or not. The devices are blocked either by resetting the password on the Google server or by removing the email profile from the device.
Note: Irrespective of the type of email client, for password provisioning to occur, all the Gmail models require an EAS profile. For new installs, associating an EAS profile is mandatory. For the upgrades, the admin has to manually associate an EAS profile to the MEM configuration after completing the upgrade process.


  1. From the UEM console main menu, navigate to Email > Email Settings, and then select Configure.
  2. Set these requirements in the Platform wizard form.
    1. Select Direct as the Deployment Model.
    2. Select Google Apps using Password Provisioning as the Email Type.
    3. Select With Password Retention or Without Password Retention as the Google Deployment Type.
    4. Select Next.
  3. In the Deployment wizard form, complete the following options.
    Setting Description
    Friendly Name Enter a friendly name for the Gmail deployment.
    Google Apps Domain Enter the registered Google Apps domain address.
    Google Apps Sub-Domain Enter the Google Apps sub domain address, if applicable.
    Google Apps Admin Username Enter the full email address in the Google Apps Admin Username field.
    Service Account Certificate (*.p12) Upload the Service account certificate. Enter the certificate password when prompted. The certificate password is created while generating the Service Account client ID on the Google console.
    Directory service account email address Enter the Service Account email address that was generated while creating the Service Account Certificate.
    Application Name Enter the project name that you had created earlier.
  4. Select Next.
  5. In the Profiles wizard form, create a new profile or associate an existing profile. Select Next.
    The MEM Config Summary form provides a quick overview of the basic configuration you have just created for the Gmail deployment.
  6. Save the settings.

What to do next

After configuring your Gmail deployment, configure the advanced settings for the deployment.