Android Enterprise device settings to configure email, authentication, and synchronization in Intune

This article describes the different email settings you can control on Android Enterprise personally owned devices with a work profile. As part of your mobile device management (MDM) solution, use these settings to configure an Exchange email server, use SSL to encrypt emails, and more. The email profile uses the email app on the device, and allows users to connect to their organization email.

This feature applies to:

  • Android Enterprise personally owned devices with a work profile (BYOD)

On Android Enterprise Fully Managed, Dedicated, and Corporate-owned Work Profiles, use app configuration policies. For Android device administrator, go to Android device settings to configure email.

As an Intune administrator, you can create and assign email settings to Android Enterprise personally owned devices with a work profile. To learn more about email profiles in Intune, go to configure email settings.

Before you begin

Android Enterprise

  • Email app: Select Gmail or Nine Work. This client app connects to the email server you enter.

  • Email server: Enter the host name of your Exchange server. For example, enter outlook.office365.com.

  • Username attribute from Microsoft Entra ID: This name is the attribute Intune gets from Microsoft Entra ID. Intune dynamically generates the username that this profile uses. Make sure your users have email addresses that match the attribute you select. Your options:

    • User Principal Name: Gets the name, like user1 or [email protected].
    • User name: Gets only the name, like user1.
  • Email address attribute from Microsoft Entra ID: This name is the email attribute Intune gets from Microsoft Entra ID. Intune dynamically generates the email address this profile uses. Your options:

    • User principal name: Uses the full principal name, like [email protected] or user1, as the email address.
    • Primary SMTP address: Uses the primary Simple Mail Transfer Protocol (SMTP) address, like [email protected], to sign in to Exchange.
  • Authentication method: Select Username and Password or Certificates as the authentication method used by the email profile.

    • If you select Certificate, select a client SCEP or PKCS certificate profile that you previously created to authenticate the Exchange connection.
  • SSL: Enable uses Secure Sockets Layer (SSL) communication when sending emails, receiving emails, and communicating with the Exchange server. Disable doesn't use SSL.

  • Amount of email to synchronize: Select the amount of time of email you want to synchronize. Or, select Unlimited to synchronize all available email.

  • Content type to sync (Nine Work only): Select the data you want to synchronize on the devices. Your options:

    • Contacts: Enable allows end users to sync contacts to their devices.
    • Calendar: Enable allows end users to sync the calendar to their devices.
    • Tasks: Enable allows end users to sync any tasks to their devices.