--- title: Key-value pairs for customization Ivanti Email+ for iOS (Cont.) slug: emailplus/guide/ios/key-value-pairs-for-customization-ivanti-email-for-ios-cont createdAt: 2026-09-07T11:21:47.453Z --- You can configure and customize the following features with key-value pairs: - [Prompt the device user for password](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Keyboard extension](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Enable Show Pictures](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Photo library](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Calendar customization](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Notes customization](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Default network timeout](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [App feedback](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Troubleshooting](docId\:O4pXAus2Z_E7Y5NH8cUMy) - [Miscellaneous](docId\:O4pXAus2Z_E7Y5NH8cUMy) Table 1. key-value pairs for customization |
Key
|
Value: Enter/ Select one
|
Description
| | ------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Prompt the device user for password** | | | | prompt\_email\_password
(Ivanti EPMM only) | - true
- false | true: Email+ prompts the user for the email password *before* attempting to connect to the email server. When Email+ first launches and connects to the email server, Email+ provides the user’s email password to the email server.
false: When Email+ first launches and connects to the email server, it does not provide the device user’s email password to the server. After establishing a connection with the email server, Email+ prompts the user for an email password. If the email server limits the number of password attempts, it counts the connection as one failed attempt.
Set the value of this key to true if the email server allows only a small number of password attempts. Example: It he email server allows only three attempts, setting this value to true ensures that device users get three attempts, not two attempts.
Default if key-value is not configured: false | | allow\_prompt\_password | - 0
- 1 | 0 = users are allowed access without a prompt for a password.
1 = users are prompted for a password to access email.
Default if key-value is not configured: 1. | | mail\_password (Ivanti EPMM only) | *User’s password for the ActiveSync server* | You can use the Ivanti EPMM variable $PASSWORD$ if you have checked Save User Password in Settings > Preferences. Ivanti EPMM then passes the user’s password as the value to the device.
If you plan to use the $PASSWORD$ variable, be sure to set Save User Password to Yes before any device users register. If a device user was registered before you set Save User Password, Email+ prompts the user to enter the password manually.
Ivanti recommends deleting the key if the password is not being saved on Ivanti EPMM.
Default if key-value is not configured: Email+ requests device users to enter the password. | | **Keyboard extension** | | | | MI\_AC\_IOS\_ALLOW\_CUSTOM\_KEYBOARDS | - true
- false | true: Email+ allows the use of keyboards extensions.
false: Email+ does not allow the use of keyboards extensions.
This key-value pair is case sensitive.
Default if key-value is not configured: false. | | **Enable Show Pictures** | | | | show\_pictures\_default
(Ivanti EPMM only) | - true
- false | true: Enables the Show Pictures option. Device users automatically see images when opening an email.
false: Disables the Show Pictures option. Device users must tap Show Pictures to view images when opening an email.
Device users can override the value you configure by toggling the Show Pictures option on or off.
When changing the value of this key, Email+ does not change the Show Pictures option until after completing a full synchronization. A full synchronization occurs only when you change certain fundamental key-value pairs, like email\_address, or when the device user uninstalls and reinstalls Email+ for iOS.
Default if key-value is not configured: false. | | **Photo library** | | | | allow\_photo\_library\_access | - true
- false | - true: Users can attach photos and video files from their personal photo library on the device.
- false: Disables access to the personal photo library, including video files, from Email+. Device users cannot attach photos or videos from their personal photo library. However, users can take new photos or videos directly from the email they are composing in Email+ and attach to the email.
This feature allows administrators to clearly separate work-related and personal content on device.
Default if key-value is not configured: true. | | **Calendar customization** | | | | calendar\_default\_reminder | - -1
- 0
- 5
- 10
- 15
- 30
- 60
- 120
- 1440
- 2880 | Specifies the default calendar alert:
- -1: No alert
- 0: At the time of event
- 5: 5 minutes before the event
- 10: 10 minutes before the event
- 15: 15 minutes before the event
- 30: 30 minutes before the event
- 60: 1 hour before the event
- 120: 2 hours before the event
- 1440: 1 day before the event
- 2880: 2 days before the event
Device users can edit the alert as desired after creating the event.
Default if key-value is not configured: -1. | | calendar\_default\_mode\_tablet | - day
- week
- month
- list | Sets the default Calendar view on an iPad.
Device users can change the view in the Calendar's Settings. The device user’s choice overrides the default set by the administrator.
Default if key-value is not configured: week. | | calendar\_default\_mode\_phone | - day
- month
- list | Sets the default Calendar view on an iPhone.
Device users can change the view in the Calendar's
Settings. The device user’s choice overrides the default set by the administrator.
Default if key-value is not configured: day. | | calendar\_reset\_view\_threshold | *A number* | Sets the inactivity threshold after which the calendar view is reset to the default view.
The inactivity threshold is measured in seconds.
If the device screen is auto-locked or the app is in background for more than the configured time, the default view is loaded when users launch Calendar.
Default if key-value is not configured: 300 seconds.
The minimum value: 120 seconds | | calendars\_sync\_period | The KVP can contain numbers 0, 1, 3, 6 where:
0 - sync all events
1 - sync events for 1 month (default)
3 - sync events for 3 months
6 - sync events for 6 months | Configures an extended sync period for calendar events. After the events are synced, the users can view and search events on all calendar screens. ​ | | **Notes customization** | | | | allow\_notes\_title | - true
- false | true: Email+ users are presented with a separate title field to add a title to a note.
false: A separate title field for a notes is not available, instead, the first line of the note is used as a title.
Default if key-value is not configured: false. | | **Default network timeout** | | | | default\_network\_timeout | *A positive integer* | Sets the app’s default timeout for all ActiveSync network requests. The value is measured in seconds.
Example: 30. In this example, for ActiveSync network requests, Email+ will timeout after 30 seconds.
Default if key-value is not configured: 90 seconds | | **App feedback** | | | | feedback\_email\_address
(Ivanti EPMM only) | *An email address* | Device user app feedback and log messages are sent to the email address.
Default if key-value is not configured: App feedback is not available to Email+ users. | | **Email watermark** | | | | email\_watermark | Any alphanumeric string | Adds watermark in an email for mail view and mail compose screens supported. The text for the watermark is unique to a customer. | | email\_watermark\_parameters | - textColor,
- textSize,
- horizontalSpacing,
- verticalSpacing
Where:
textColor is #AARRGGBB and textSize, horizontalSpacing, and verticalSpacing are integer values. | Sets the watermark parameters such as text color, size, horizontal and vertical spacing. | | **Troubleshooting** | | | | allow\_logging
(Ivanti EPMM only) | - true
- false | true: Email+ logs data to the device console, and allows the log file to be attached to a feedback email. Entering true is useful for problem diagnosis.
If an MSAL related error occurs during authentication, you can now share the Email+ logs using the "**Collect Logs**" button displayed in the error alert.
Default if key-value is not configured: false. | | allow\_show\_configuration | - true
- false | true: Enables the display of configuration information while setting up Email+ on an iOS device. Set this value to true for test devices first, then disable the key value pair when it is time to roll out Email+ for iOS to device users.
Default if key-value is not configured: false. | | exit\_on\_configuration\_error | - true
- false | - true: Email+ simply shuts down without any notification if there is an error in the Email+ configuration that is pushed to the device.
- false: If Email+ encounters an error in the configuration, device users are provided with the option to email the Email+ logs. The Email+ logs are helpful in debugging configuration errors.
Not all configuration errors are considered critical.
Example: A missing S/MIME signing or encryption certificate is not considered a critical error.
Default if key-value is not configured: true | | enable\_calendar\_dump | - true
- false | - true: Enables calendar dump to Email+ feedback logs for troubleshooting. Calendar data is encrypted.
- false: Disables calendar dump to Email+ feedback logs.
Default if key-value is not configured: false | | allow\_logging\_insecure | - true
- false | true: Enables insecure logs for troubleshooting.

false: Disables insecure logs for troubleshooting.
Default if key-value is not configured: false. | | allow\_logging\_responses | - true
- false | true: Enables to record requests and responses for troubleshooting.
false: Disables record requests and responses for troubleshooting.
Default if key-value is not configured: false. | | **Miscellaneous** | | | | disabled\_features | - move\_button
- local\_cache\_mail
- local\_cache\_calendar
- local\_cache\_all
- attach\_files
- openin\_compose
- document\_viewer
- email\_priority\_support
- modern\_mail\_list
- eas\_16 | With the disabled\_features key-value pair the admin can disable the values that are enabled by default:
- **move\_button**: Disables the Move button in the Move to screen in Email+. Emails are moved without confirmation when users tap on a folder.
- **local\_cache\_mail**: Disables local caching of email addresses from mail (recipients from To, Cc, Bcc fields will not be added to local cache).
- **local\_cache\_calendar**: Disables local caching of email addresses from calendar (recipients from Invitees field will not be added to local cache).
- **local\_cache\_all**: Disables all local caching.
- **attach\_files**: Disables the Attach Files option in Email+.
- **openin\_compose**: Disables opening of files into Email+ from other apps.
- **document\_viewer**: Disables opening of attachments in Email+. Instead, users are provided the Open In ... option to choose an app in which to view the attachment. However, some attachments, such as text, .eml, audio, and certificate files are opened in Email+. The Email+ app does not support .msg file attachments in Open In option. Configure the value if you are also using the Watermark capability in Docs\@Work. If you want watermarks to be shown on all documents, configure the value to disable the document viewer in Email+ and use Docs\@Work exclusively.
- **email\_priority\_support**: Disables the priority setting for emails.
- **modern\_mail\_list**: Disables new mail list is, this feature is enabled by default.
- **eas \_16**: Disables support for Exchange ActiveSync16, for more information, see [ActiveSync16 for iOS devices](https://help.ivanti.com/mi/help/en_us/EML/4.x.x/gdi/activesync16_support.htm) | | enabled\_features | - gmail\_smart\_folders
- rms\_support
- fit\_to\_width
- smime\_suppress\_certificate\_email\_check
- calendar\_delegation
- personal\_calendar
- delegated\_shared\_mailbox
- export\_contacts
- ai\_tools
- microsoft\_teams\_meetings
- graph\_api
| With the enabled\_features key-value pair, the admins can enable the values that are disabled by default.
- Enables smart folders, All mails, Spam, and Starred, for Gmail accounts.
- Enables fetching, displaying and composing of the protected messages. If rms\_support is enabled with configured server, list of fetched templates is displayed in Settings/Troubleshooting/Available Permissions. Due to ActiveSync protocol limitations, maximum of 20 templates are displayed in Email+.
- Enables scaling down the size of an email to fit the width of the screen, but will not reduce it to less than 25% of its original size.
- Enables automatic certificate verification using email address is suppressed and the user can manually add a certificate from GAL and Keystore using "Add Encryption Certificate" option.
The **smime\_suppress\_certificate\_email\_check** feature works only when the **modern\_sync\_engine** value is configured for the **enabled\_features** key-value pair.
- Enables the delegated calendar
- personal\_calendar: To enable personal calendar function. This feature is enabled only for Modern Sync Engine which was enabled by default from Email+ 4.4.0 release onwards.
- delegated\_shared\_mailbox: To enable the following options in the Settings section:
- Delegated Mailbox
- Delegated Calendar
- Shared Mailbox
- export\_contacts: To automatically sync Email+ contacts to native contacts app.
- ai\_tools: To enable Apple Intelligence controls.
- microsoft\_teams\_meetings: To enable microsoft teams in the Calendar settings.
- graph\_api: To enable Microsoft Graph-based functionality in Email+. When enabled, supported Microsoft 365 email and calendar features use Microsoft Graph API. | | always\_fetch\_mime | - true
- false | Use this option to set the default value for Email+ setting of **Always Fetch MIME**. Enable this option only when applications fail to launch when you click the links in the email body.
Default if key-value is not configured: false | | allow\_callkit | - true
- false | Use this option to disable CallKit functionality, which is restricted in China by Apple. Customers are advised to set allow\_callkit to false for all their users in China.
True - CallKit functionality enabled
False - CallKit functionality disabled
Default if key-value is not configured: true | | disable\_analytics | - true
- false | Use this option to disable crash analytics.
Default if key-value is not configured: false | | filepass\_key\_identifier | A unique, sufficiently complex alphanumeric string. | This key allows admin to enable sharing documents securely between Docs\@Work and Microsoft IntuneMAM protected Office365 apps through FilePass.
The value for this key-value pair needs to be same for the all the supported productivity apps (Docs\@Work, Email+, and FilePass) participating in File Sharing with Microsoft Office 365 apps. | | migrate\_from\_email\_exchange\_host | The value is the previous email\_exchange\_host key that was set up on Ivanti EPMM. | This key allows the admin to configure Ivanti EPMM to Ivanti Neurons for MDM migration for the email exchange host.
Post-migration of a device, the Email+ app needs to be re-synced to continue receiving and sending email messages. The content in local folders, such as Draft and Outbox, will be removed and no longer available. The Inbox folder should be refreshed for the email list to display. | | eas\_request\_frequency\_limit | The recommended value is 400.​​ | This KVP is added to specify the throttling limit as X requests per 10 minutes, where X is the KVP value. | | implicit\_encryption | - true
- false | The encryption logic for the Email+ 4.10.1 is now improved and enhanced. In case of any issues related to this update, it can now be rolled back by setting the **implicit\_encryption = true** key-value pair in the AppConnect configuration | | **Microsoft Office 365 authority and resource URL** | | | | modern\_auth\_authority\_url | https\://login.microsoftonline.com/common | This KVP is added to specify Microsoft Office 365 authority url. | | modern\_auth\_resource\_url | https\://outlook.office365.com | This KVP is added to specify Microsoft Office 365 resource url. | | **Phishing reporting** | | | | report\_phishing\_address | email address | Enabling 'Report Phishing' option on View screen in the "More" menu. Phishing email will be sent to email address set in value. | | **Weekend alerts** | | | | notifications\_default\_weekend\_alerts | - true
- false | The Email+ app now supports weekend alert notification for new users by default.
When a user installs the app the first time or after the application is reinstalled after the app was wiped, the "Weekend Alerts" would be set to notifications\_default\_weekend\_alerts value. (The reinstall of Email+ app will have no impact as Weekend Alerts settings are stored in KeyChain).
The default is set to true | | **Mail organization** | | | | organize\_by\_date | - true
- false | Disables email threading for email messages. When a user installs the app for the first time or after the application wipe, the "**Organize By Thread**"is set to **organize\_by\_date** opposite value. | | **Avaya Workplace dialer app** | | | | default\_dialer | - avaya\_workplace
- native | When "avaya\_workplace" value is selected, the Avaya Workplace app is used as a default dialer app.
Native dialer is used as the default value, if **Avaya Workplace** dialer is not available or installed.
In the Email+app **Settings > Contacts "Default dialer"** option is available with pre-selected default dialer. | | allowed\_dialers | - avaya\_workplace | The **allowed\_dialers** kvp allows the Email+ app to use the **Avaya Workplace** dialer app as the default dialer along with the native dialer. | | allow\_universal\_links | - true
- false | This key allows the admin to open links in the associated application(like native iOS-Mail-App). If the value is set to false the link opens in the Web\@Work app. | | **Custom Microsoft Authentication Library (MSAL) Configuration Options** | | | | msal\_resource\_scope | | Defines the resource scope required by MSAL to acquire access tokens for protected resources. Specify the multiple scopes with a single comma-separated string (for example, user.read, mail.read, and so on).
This KVP is optional and required only if the customer has their own Email+ Azure application in their Azure tenant. | | msal\_client\_id | | Replaces the default application ID used by the Microsoft Authentication Library (MSAL) with a custom value.
This KVP is optional and required only if the customer has their own Email+ Azure application in their Azure tenant. | | msal\_redirect\_url | | Redirects the url for MSAL
This KVP is optional and required only if the customer has their own Email+ Azure application in their Azure tenant.​ | | msal\_internal\_web\_view | - true
- false | true: MSAL should use the internal web view (wkWebView)
false: MSAL should use Safari view controller
Default if key-value is not configured: false.
Modern Auth with certificate-based authentication is not supported by Safari view controller. | | msal\_disable\_authenticator\_use | - true
- false | This key allows the admin to disable the launching of Microsoft Authenticator to Authorization purpose.

true: disables launching Microsoft Authenticator
false: forces launching Microsoft Authenticator if it's installed
Default if key-value is not configured: false.
This KVP is optional; it's required for Per-App VPN configuration if Microsoft Authenticator is not tunnelled so it's not part of the authentication data flow. | | **Graph API Calls Configuration Options** | | | | email\_graph\_host
msal\_graph\_resource\_scope
msg\_min\_allowed\_auth\_mode
realtime\_notifications\_protocol | graph.microsoft.com
https\://graph.microsoft.com/.default
modern\_auth

1 |
This key allows the admin to enable or disable Graph API operations. |