Configuring POP and IMAP email settings (for iOS and macOS)
Select Policies & Configs > Configurations > Add New > Email to set up POP or IMAP email. The following table describes the email settings you can specify:
Table: POP and IMAP email settings (iOS and macOS)
Section | Field Name | Description |
|---|---|---|
| Name | Enter brief text that identifies this group of email settings. |
| Description | Enter additional text that clarifies the purpose of this group of email settings. |
| Account Type | Select POP or IMAP to indicate the type of email account you are configuring. The Internet Service Provider (ISP) can give you information on which type of account is available. |
| User Email | Specify the email address to use. The default value is $EMAIL$. Use this field to specify an alternate format. For example, your email standard might be $EMAIL$_US for users in the United States. Custom attribute variable substitutions are supported. See Supported variables. |
Incoming Mail Server Settings | | |
| Path Prefix | Specify the IMAP path prefix for the email client. A prefix is generally required when all IMAP folders are listed under the Inbox. ISPs that require prefixes usually provide information on the specific prefix to configure. |
| Server Address | Specify the address for the server handling incoming mail. The Internet service provider (ISP) can give you this address. |
| Server Port | Specify the port number for the server handling incoming mail. The Internet service provider (ISP) can give you this information. |
| Require SSL | Specify whether secure sockets layer (SSL) is required for incoming email transport. This is determined by the way in which the user mailboxes are set up. Your Internet service provider (ISP) can give you this information. |
| User Name | Specify the email address to use. The default value is $EMAIL$. Use this field to specify an alternate format. For example, your standard might be $USERID$. Custom attribute variable substitutions are supported. Why: Some enterprises have a strong preference concerning which identifier is exposed. See Supported variables |
| Use Password Authentication | Specify whether to authenticate the password for email access. |
| Password | Specify the password to use. The default value is $PASSWORD$. Use this field to specify a custom format, such as $PASSWORD$_$USERID$. Custom attribute variable substitutions are supported. See Supported variables. |
Outgoing (SMTP) Mail Server Settings | | |
| Server Address | Specify the address for the SMTP server handling outgoing mail. |
| Server Port | Specify the port number for the SMTP server handling outgoing mail. |
| Require SSL | Specify whether to use secure sockets layer (SSL) outgoing email transport. |
| Require Authentication | Specify whether to use secure sockets layer (SSL) for outgoing email transport. |
| Use Same User Name and Password for Sending Email | Specify whether to use the same user name and password used for incoming email. If you select this option, then the Server User Name option is disabled. |
| Server User Name | Specify the user name to use. The default value is $EMAIL$. Use this field to specify an alternate format. For example, your standard might be $USERID$. Why: Some enterprises have a strong preference concerning which identifier is exposed. See Supported variables |
| Use Password Authentication | Specify whether to authenticate the password for email access. |
| Password | Specify the password to use. The default value is $PASSWORD$. Use this field to specify a custom format, such as $PASSWORD$_$USERID$. See Supported variables |
Advanced Settings | | Not for iOS, macOS |
| Automatic Send/Receive | Specify how new email should be sent and retrieved. You can set an automatic time interval or select Manual to configure no automatic email exchange. |
| Download Messages | Specify the number of messages to download to the device during send/receive. |
| Message Format | Indicate whether messages should be formatted in plain text or HTML. |
| Message Download Limit | Specify a size limit for a single message to be downloaded. |
| Download Attachment | Specify a size limit for an attachment to be downloaded, or specify that attachments are not be downloaded. |
iOS 5 or later Settings | | |
| Block move/forward messages to other email accounts | Enables the iOS 5 feature that prevents users from moving email messages to other email accounts or forwarding email from accounts other than the originating account. |
| Block email access to 3rd party apps | Prevents third-party apps from using the account for email access. |
| Allow Recent Address syncing (iOS 6 and later) | Selected by default, indicates recent address syncing. If this check box is cleared, this email account is excluded from address recent syncing. |
| Allow Mail Drop (iOS 9.2 and later) | De-selected by default, indicates allowance of Mail Drop. If this check box is selected, Mail Drop is allowed for this email account. Mail Drop limitations by Apple are applied. In Email settings on the users' device, the user can select the Send large attachments with Mail Drop option. This allows the user to upload attachments up to 5 GB and send a link or preview to email recipients. |
S/MIME Setting | S/MIME settings apply only to iOS devices. | |
S/MIME | | |
| Enable for iOS 9.3.3 (or earlier) | Select to enable S/MIME signing and encryption on devices running iOS 9.3.3 or earlier. You must select this option for the fields in the S/MIME Signing and S/MIME Encryption sections to apply to devices running iOS 9.3.3 or earlier. |
S/MIME Signing | S/MIME signing applies only to iOS devices. | |
| S/MIME Signing: Enable | Disabled by default. Select the check box to enable S/MIME signing. |
| S/MIME Signing identity | Select a certificate enrollment setting as a signing identity. If you do not make a selection, then the device user will be prompted to select from the certificates that are already installed on the device. If the device has no certificate, then S/MIME signing will not be functional on the device. Related topics |
| Signing Identity: User Overrideable | iOS 12.0 or supported newer versions. Select to allow the user to select the signing identity. |
| S/MIME Signing: User Overrideable | iOS 12 or supported newer versions. Select to allow the user to enable and disable S/MIME signing in device settings. |
S/MIME Encryption | S/MIME signing applies only to iOS devices. | |
| Encryption by Default | Disabled by default.Select to enable S/MIME encryption. |
| Encryption Identity | Select a certificate enrollment setting as an encryption identity. If you do not make a selection, then the device user will be prompted to select from the certificates that are already installed on the device. If the device has no certificate, then S/MIME encryption will not be functional on the device. Related topics |
| Encryption Identity: User Overrideable | iOS 12.0 or supported newer versions. Select to allow the user to set the S/MIME encryption identity and enable encryption. |
| Per-Message Encryption Switch | Per-message S/MIME for iOS allows device users to enable or disable S/MIME encryption for each email they send. S/MIME encryption is incompatible with Sentry attachment encryption. |
Supported variables
You can use the following variables in fields that support variables.
- For user name fields: $USERID$, $EMAIL$,$SAM_ACCOUNT_NAME$, $USER_CUSTOM1$, $USER_CUSTOM2$, $USER_CUSTOM3$, $USER_CUSTOM4$, $CUSTOM_DEVICE_Attributename$, CUSTOM_USER_Attributename$, or $NULL$
- $MANAGED_APPLE_ID$
For Shared iPad devices and User Enrolled devices only.
- For password fields: $USERID$, $EMAIL$, $PASSWORD$, $GOOGLE_AUTOGEN_PASSWORD$, $USER_CUSTOM1$, $USER_CUSTOM2$, $USER_CUSTOM3$, $USER_CUSTOM4$, $CUSTOM_DEVICE_Attributename$, CUSTOM_USER_Attributename$, or $NULL$.
Custom attribute variable substitutions are supported.