Android Enterprise device settings to configure email, authentication, and synchronization in Intune
This article describes the different email settings you can control on Android Enterprise personally owned devices with a work profile. As part of your mobile device management (MDM) solution, use these settings to configure an Exchange email server, use SSL to encrypt emails, and more. The email profile uses the email app on the device, and allows users to connect to their organization email.
This feature applies to:
- Android Enterprise personally owned devices with a work profile (BYOD)
On Android Enterprise Fully Managed, Dedicated, and Corporate-owned Work Profiles, use app configuration policies. For Android device administrator, go to Android device settings to configure email.
As an Intune administrator, you can create and assign email settings to Android Enterprise personally owned devices with a work profile. To learn more about email profiles in Intune, go to configure email settings.
Before you begin
Deploy your email app. For more information, go to Configure email apps.
- If your profile uses Gmail and you want to use modern authentication, then you might have to deploy the Google Chrome app to the work profile.
Create an Android Enterprise email device configuration profile > Personally-owned work profile.
Android Enterprise
Email app: Select Gmail or Nine Work. This client app connects to the email server you enter.
Email server: Enter the host name of your Exchange server. For example, enter
outlook.office365.com
.Username attribute from Microsoft Entra ID: This name is the attribute Intune gets from Microsoft Entra ID. Intune dynamically generates the username that this profile uses. Make sure your users have email addresses that match the attribute you select. Your options:
- User Principal Name: Gets the name, like
user1
or[email protected]
. - User name: Gets only the name, like
user1
.
- User Principal Name: Gets the name, like
Email address attribute from Microsoft Entra ID: This name is the email attribute Intune gets from Microsoft Entra ID. Intune dynamically generates the email address this profile uses. Your options:
- User principal name: Uses the full principal name, like
[email protected]
oruser1
, as the email address. - Primary SMTP address: Uses the primary Simple Mail Transfer Protocol (SMTP) address, like
[email protected]
, to sign in to Exchange.
- User principal name: Uses the full principal name, like
Authentication method: Select Username and Password or Certificates as the authentication method used by the email profile.
SSL: Enable uses Secure Sockets Layer (SSL) communication when sending emails, receiving emails, and communicating with the Exchange server. Disable doesn't use SSL.
Amount of email to synchronize: Select the amount of time of email you want to synchronize. Or, select Unlimited to synchronize all available email.
Content type to sync (Nine Work only): Select the data you want to synchronize on the devices. Your options:
- Contacts: Enable allows end users to sync contacts to their devices.
- Calendar: Enable allows end users to sync the calendar to their devices.
- Tasks: Enable allows end users to sync any tasks to their devices.
Related articles
Create email profiles for Android Samsung Knox, iOS/iPadOS, and Windows 10 and later devices.