Skip to content

Email account configuration (macOS user policy)

The Email account configuration lets you set up an Exchange Web Services (EWS) account for Contacts, Mail, Reminders, and Calendar.


To use the %_USERNAME_% and %_EMAILADDRESS_% placeholders as described below, you must configure the user’s Exchange Login and Email Address settings in Sophos Central Admin. See Users.

Setting Description
Account name The account name.
Server name

For Exchange Online, enter

For Exchange Server, enter your server URL.

Note that applies to the worldwide Microsoft 365 cloud. If you’re using a different Microsoft 365 cloud, such as Office 365 Germany, see the Microsoft document Office 365 URLs and IP address ranges.

Don’t enter the URL of the Sophos Mobile EAS proxy. Macs don’t support the ActiveSync protocol, which the EAS proxy uses.

Leave this field empty when using OAuth. The Exchange host is auto-discovered.


For Exchange Online, leave this field empty.

For Exchange Server, enter the domain of the user account.


The user's sign-in name.

For Exchange Online, this is usually the email address. Enter %_EMAILADDRESS_% to use the email address of the user assigned to the device.

For Exchange Server, enter %_USERNAME_% to use the name of the user assigned to the device.

Email address

The email address of the account.

If you enter the variable %_EMAILADDRESS_%, the server replaces it with the actual email address.


The password for this account.

If you leave this field empty, users must enter the password on their devices.

Turn on OAuth 2.0 The account uses the OAuth 2 authentication framework, i.e. users authenticate with their Microsoft credentials.
OAuth authorization endpoint

The URL of the OAuth endpoint handling requests for user authentication.

When you enter a value, the mail server isn’t auto-discovered. You must enter its URL in Server name.

Only enter a value if required by your authentication provider.


The connection to the Exchange server is secured by SSL or TLS (depending on what the server supports).

We recommend that you select this check box.