Create an email configuration profile for the native mail client on iOS devices.


  1. Navigate to Resources > Profiles & Baselines > Profiles > Add. Select Apple iOS.
  2. Configure the profile's General settings.
  3. Select the Exchange ActiveSync payload.
  4. Select Native Mail Client for the Mail Client. Fill in the Account Name text box with a description of this mail account. Fill in the Exchange ActiveSync Host with the external URL of your company's ActiveSync server.
    The ActiveSync server can be any mail server that implements the ActiveSync protocol, such as Lotus Notes Traveler, Novell Data Synchronizer, and Microsoft Exchange. In the case of Secure Email Gateway (SEG) deployments, use the SEG URL and not the email server URL.
  5. Select the Use SSL check box to enable Secure Socket Layer use for incoming email traffic.
  6. Select the S/MIME check box to use more encryption certificates. Prior to enabling this option, ensure you have uploaded necessary certificates under Credentials profile settings.
    1. Select the S/MIME Certificate to sign email messages.
    2. Select the S/MIME Encryption Certificate to both sign and encrypt email messages.
    3. Select the Per Message Switch check box to allow end users to choose which individual email messages to sign and encrypt using the native iOS mail client (iOS 8+ supervised only).
  7. Select the Use OAuth check box to include sign in and token URL.
    1. OAuth Sign In URL - Enter the OAuth Sign In URL.
    2. OAuth Token URL - Enter the OAuth Token URL.
  8. Fill in the Login Information including Domain Name, Username and Email Address using look-up values. Look-up values pull directly from the user account record. To use the {EmailDomain}, {EmailUserName} {EmailAddress} look-up values, ensure your Workspace ONE UEM user accounts have an email address and email user name defined.
  9. Leave the Password field empty to prompt the user to enter a password.
  10. Select the Payload Certificate to define a certificate for cert-based authentication after the certificate is added to the Credentials payload.
  11. Configure the following Settings and Security optional settings, as necessary:
    1. Past Days of Mail to Sync – Downloads the defined amount of mail. Note that longer time periods will result in larger data consumption while the device downloads mail.
    2. Prevent Moving Messages – Disallows moving mail from an Exchange mailbox to another mailbox on the device.
    3. Prevent Use in 3rd Party Apps – Disallows other apps from using the Exchange mailbox to send message.
    4. Prevent Recent Address Syncing – Disables suggestions for contacts when sending mail in Exchange.
    5. Prevent Mail Drop – Disables use of Apple's Mail Drop feature.
    6. (iOS 13) Enable Mail – Enables the configuration of a separate Mail app for the Exchange account.
    7. (iOS 13) Allow Mail toggle – If disabled, prevents the user to toggle Mail on or off.
    8. (iOS 13) Enable Contacts – Enables the configuration of a separate Contacts app for the Exchange account.
    9. (iOS 13) Allow Contacts toggle – If disabled, prevents the user to toggle Contacts on or off.
    10. (iOS 13) Enable Calendars – Enables the configuration of a separate Calendar app for the Exchange account.
    11. (iOS 13) Allow Calendars toggle – If disabled, prevents the user to toggle Calendars on or off.
    12. Enable Notes – Enables the configuration of a separate Notes app for the Exchange account.
    13. (iOS 13) Allow Notes toggle – If disabled, prevents the user to toggle Notes on or off.
    14. (iOS 13) Enable Reminders – Enables the configuration of a separate Reminders app for the Exchange account
    15. (iOS 13) Allow Reminders toggle – If disabled, prevents the user to toggle Reminders on or off.
  12. Assign a Default Audio Call App that your Native EAS account will use to make calls when you select a phone number in an email message.
  13. Select Save and Publish to push the profile to available devices.