Email account configuration (Android device policy)

The Email account configuration lets you add an Exchange Online or Exchange Server email account on the device.

Requirement

To use the %_USERNAME_% and %_EMAILADDRESS_% placeholders as described below, you must configure the user’s Exchange Login and Email Address settings in Sophos Central Admin. See Users.

Note

On devices with LG GATE, Samsung Knox, or Sony Enterprise API, the email app is configured automatically. On other Android devices, users receive a message to configure the email app. The configuration details are available in the Sophos Mobile Control app.

Setting	Description
Account name	The account name.
Server name	For Exchange Online, enter `outlook.office365.com`. For Exchange Server, enter your server URL. Note that `outlook.office365.com` applies to the worldwide Microsoft 365 cloud. If you’re using a different Microsoft 365 cloud, such as Office 365 Germany, see the Microsoft document Office 365 URLs and IP address ranges. When you use Exchange Server with the Sophos Mobile EAS proxy, enter its URL instead.
Domain	For Exchange Online, leave this field empty. For Exchange Server, enter the domain of the user account.
User	The user's sign-in name. For Exchange Online, this is usually the email address. Enter `%_EMAILADDRESS_%` to use the email address of the user assigned to the device. For Exchange Server, enter `%_USERNAME_%` to use the name of the user assigned to the device.
Email address	The email address of the account. If you enter the variable `%_EMAILADDRESS_%`, the server replaces it with the actual email address.
Sender	A sender name for this account. If you enter the variable `%_EMAILADDRESS_%`, the server replaces it with the actual email address.
Password	The password for this account. If you leave this field empty, users must enter the password on their devices.
Synchronization period	The time period used for synchronizing emails. Only the emails from within the specified period are synchronized to the inbox on the managed device.
Synchronization interval	The interval between email synchronization processes.
SSL/TLS	The connection to the Exchange server is secured by SSL or TLS (depending on what the server supports). We recommend that you select this check box.
Default account	The account is used as the default email account.
Allow all certificates	Allow all certificates in transfer processes from the email server.
Client certificate	The client certificate for the connection to the Exchange server.
Allow forwarding emails	Allow forwarding of emails.
Allow use of HTML format	Allow the use of HTML format in emails.
Maximum attachment size in MB	The maximum size of a single email message.
Synchronize content types	The content types to be synchronized.

Sony Enterprise devices

For Sony devices with Enterprise API level 6 or earlier, the Exchange account information must match the user assigned to the device.

On these devices, the Sophos Mobile Control app is not able to send the ActiveSync ID to Sophos Mobile. When the device contacts the EAS proxy for the first time, the ActiveSync ID that the email client sends is not known to Sophos Mobile. To verify the account details, the EAS proxy searches for a device with an unknown ActiveSync ID and an assigned user that matches the user information supplied by the email client. If such a device is found, the ActiveSync ID is assigned to that device and the email request is passed on to the Exchange server. Otherwise, the request is rejected.

For details, see How does the Sophos Mobile assign an ActiveSync ID to Android devices?