Assign Workspace ONE Boxer to devices with the assignment feature known as flexible deployment. Configure the security and email management features within the assignment procedure so that they meet your organization's needs.

Important:  If the passcode is set to None, then the Workspace ONE Boxer app is not encrypted. If you do not enforce an app-level passcode, then consider enforcing a device-level passcode using a device profile, which encrypts the iOS device.


  1. Navigate with one of the following paths.
    • Select Add Assignment in the Assignment window.

      This navigation reflects adding an assignment immediately after adding the application to the public tab of the console.

    • Go to Apps & Books > Public, select the Workspace ONE Boxer application in the List View, select Assign, and choose Add Assignment.

      This navigation reflects adding an assignment later after adding the application to the public tab of the console.

  2. Complete the settings on the Email Settings page.
    Settings Description
    Assigned Smart Groups Enter smart groups to receive the Workspace ONE Boxer flexible deployment assignment.
    Is App Restricted to Silent Install (Android) Enable to assign the application to those devices that support the silent install or the silent uninstall capability only.
    Account Name Enter a description of the mail account.
    Exchange ActiveSync Host Enter your EAS server URL. For SEG deployments, enter the SEG URL instead.
    Domain, User, Email Address

    Enter the login information, including Domain name, user name, and Email Address.

    By default, the login information includes {EmailDomain}, {EmailUserName} and {EmailAddress} that are defined as lookup values in your directory service. If you need to override these values, you can use custom lookup values.

    Password (Android Only) Enter the password to the email account or input the lookup value for pulling the password from the user account.
    Email Sync Period Set the number of past days of emails for Workspace ONE Boxer to sync.
    Calendar Sync Period Set the number of past days of calendar events for Workspace ONE Boxer to sync.
    Email Signature Specify an email signature to be used in emails that are sent using Workspace ONE Boxer.
    Authentication Type

    Choose one of the following authentication types for end users to authenticate with Exchange using the AirWatch credentials:

    • Basic – Authenticates using a user name and a password.
    • Certificate – Authenticates using a certificate. Select the desired Certificate Authority and Certificate Template.
    • Both – Authenticates using a certificate to authenticate with network appliance and a password to authenticate with Exchange.
    • Modern Authentication - OAuth based token authentication method for Office 365. To setup, see the Modern Authentication section.
    • Certificate-Based Authentication with Modern Authentication (CBA with Modern Auth) - Workspace ONE Boxer supports certificate-based authentication with Modern Authentication. Boxer support SCEP. To view the supported certificates, see Supported Certificate Authorities section in the On-Premises Certificate Authority admin guide.
      Note: iOS does not support Certificate-based authentication using Modern Authentication. Only Android supports this authentication mode.
    Passcode Setting an app-level passcode for Workspace ONE Boxer also encrypts the application. Device users set their passcode on the device at the application level when they first access the application.
    • None – Does not require a passcode.
    • Numeric – Prompts the user with a numeric keyboard to set a passcode.
      • (iOS only) Biometric ID - Enable this option to use fingerprint to authenticate the application. The user is asked to enable Touch ID settings on device the first time when they are asked for their passcode and NOT when they create their passcode during first-time setup.
      • Minimum Length - Set the minimum number of numeric characters a user's passcode must contain.
      • Timeout Minutes - Set the time in minutes until the application locks when idle.
      • Maximum Age - Set the maximum allowed days for the passcode, after which passcode expires and has to be reset. When the set number of days exceeds, the client asks the end user to create a passcode.
      • History - Determine the history of passcodes used to prevent the user from reusing passcodes.
      • Maximum Number of Failed Attempts - Determine the maximum number of failed passcode attempts before the email data in the app are erased.
    • Alphanumeric – Prompts the user with alphanumeric keyboard to set a passcode. The list explains only those options that are different from the Numeric setting.
      • Minimum Number of Complex Characters - Set the minimum number of character sets required for the passcode.
        • Character sets include uppercase letters, lowercase letters, numbers, and symbols.

        • For example, if you select 2, then a passcode must contain at least two of the character sets above. This can be a number and symbol: 3!$#!$, uppercase and lowercase: RtGfH, lowercase and symbol: p!$@!, and so on.
    Data Loss Prevention Determine how your end users can access emails, email attachments, and hyperlinks by configuring the following settings.
    Copy Paste

    If restricted:

    • End users cannot copy and paste content from Workspace ONE Boxer to other applications.
    • If personal accounts are enabled, end users can copy and paste between personal and work accounts. Therefore, consider disabling personal accounts to restrict copy and paste functionality completely.
    • Share and define options are made unavailable in the application when selecting text.
    • Workspace ONE apps shares the same clipboard if the SDK settings applied to these apps are similar irrespective of it being applied as a default profile for one app and custom profile for the other.

    Screenshots (Android Only) If restricted, Android end users cannot take screenshots of the Workspace ONE Boxer application.
    Allow Email Widget (Android Only) If enabled, Android end users can add the Workspace ONE Boxer Email widget to their home screens.
    Allow Calendar Widget (Android Only) If enabled, Android end users can add the Workspace ONE Boxer Calendar widget to their home screens.
    Hyperlinks If restricted, end users can only open hyperlinks in Workspace ONE Web.

    Choose one of the following restrictions based whether the end user can open emails and their attachments in other applications:

    • Preview Only — Set this restriction for end users to preview emails and attachments within Workspace ONE Boxer application only. End users cannot open attachments into any other applications.
    • Allowlist — Set this restriction and specify bundle IDs of the applications for emails and their attachments to open in those specified applications. The bundle IDs for Content Locker and Evernote are prepopulated.
    • Unrestricted — Set this restriction for end users to open emails and attachments in any applications.
    Caller ID

    Enable to provide Caller ID functionality for all Workspace ONE Boxer contacts.

    By enabling this feature, Workspace ONE Boxer exports names and phone numbers only to the native contacts app.

    Personal and Work Separation You can allow end users to add multiple personal accounts and use local contacts by configuring the following settings on the UEM console.
    Personal Accounts

    If restricted, end users can no longer add any additional accounts to the application.  

    If end users already have Workspace ONE Boxer on their device with personal accounts configured, then they are prompted whether they want to remove their existing personal accounts now or later. End users do not receive work email through Workspace ONE Boxer until they remove all personal accounts.

    Personal Contacts If restricted, end users can access contacts only from the email accounts in the app. If unrestricted, end users can access contacts from other apps on the device.
    Application Configuration

    You can configure settings for your Workspace ONE Boxer deployment using the Configuration Key and Configuration Value pairs provided by AirWatch.

    Application configurations are optional.

    You cannot configure the email settings when deploying Boxer as an Internal app.
  3. Select Save.
  4. If you want to restrict copying and pasting of data from and to the Workspace ONE Boxer and other supported apps, configure these settings at Apps > Settings and Policies > Security Policies > Data Loss Prevention.

    Authentication Type and Single Sign-On must be enabled for these settings to be applied on the end user devices. These restrictions are applied across all supported VMware applications.

    Settings Description
    Enable Copy and Paste Out (iOS only) When disabled, end users cannot copy and paste content from Workspace ONE Boxer to other applications except Workspace ONE productivity apps.
    Enable Copy and Paste Into When disabled, end users cannot copy and paste content from applications other than Workspace ONE productivity apps into Workspace ONE Boxer.
    End users can copy or paste content between the Workspace ONE applications which share the SDK settings. These SDK settings can be applied as a default profile for one application and custom profile for the other.


  • On iOS, the default signature links to the page Workspace ONE® User Zone that provides more information on Workspace ONE Boxer.
  • Boxer does not support SDK's Integrated Authentication functionality.