IBM MaaS360

IBM MaaS360

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Fri June 19, 2020 06:52 AM
    Hi!

    I am having a problem getting the Samsung email app automatically configured in the Android Enterprise Work Profile through ActiveSync after having migrated a Samsung A20 from Device Admin to Android Enterprise using the v7.10 (Beta) MaaS360 agent.

    The Samsung email app is automatically configured through ActiveSync in Device Admin mode without problems (before migrating to Android Enterprise Work Profile), but the process is stuck when pressing the 'Configure' button after the migration to Android Enterprise Work Profile mode, please see attached picture 'AE ActiveSync config.JPG'.

    When pressing the 'Configure' button in Device Admin mode (before migrating to Android Enterprise Work Profile), the process continues and completes, please see attached picture 'DA ActiveSync config.JPG'.

    What puzzles me is the fact that only Username and Domain are shown on the Configure wizard in AE mode, whereas Email Address, Username, Domain and Password are all shown on the Configure wizard in DA mode.

    Below are the full set of config settings for both modes. I have tested with 'Authentication Mode' both (blank), Basic and Modern, but to no avail!

    Please advice!

    SECURITY > Default Android MDM Policy > Device Settings > ActiveSync
    - Host name of the Server = (FQDN of server)
    - Use SSL = (checked)
    - Account = Use Device Enrollment Credentials
    - Identity Certificate = (blank)
    - SMIME Signing Certificate = (blank)
    - SMIME Encryption Certificate = (blank)
    - Account Display Name = HME E-post
    - Set as Default Account = (blank)
    - Accept All Certificates = Yes

    SECURITY > Default Android MDM Policy > Android Enterprise Settings > ActiveSync
    - Server Name = (FQDN of server)
    - Server Type = Exchange
    - Use SSL = (checked)
    - Email Address = (blank)
    - Username = (blank)
    - Domain = (blank)
    - Accept All Server Cert. = (checked)
    - Authentication Type = Password
    - Authentication Mode = (blank)/Basic/Modern - All tested
    - Default Signature = (blank)
    - Allow Tasks = Yes
    - Max. Attachment Size(KB) = (blank)

    ------------------------------
    Arne Halsteinslid
    ------------------------------


  • 2.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Mon June 22, 2020 03:47 AM

    The below information was posted in a different  discussion:

    *************************************************

    Hi Arne,

    Good to hear that v7.10 has solved the problem!

    As for the AE Active Sync configuration, just wanted to let you know that we only support Gmail through policy configuration. For any other email clients like Samsung email/Outlook, a manual setup would be needed.

    Do let me know if there's anything where I can be of assistance.

    Regards,


    ------------------------------
    Anish Kothari
    Software Developer - Android,
    IBM MaaS360
    ------------------------------

    *************************************************

    ------------------------------
    Arne Halsteinslid
    ------------------------------

    Original Message


  • 3.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Mon June 22, 2020 04:02 AM
    I notice the following web page says the only mail agent supported for Android Enterprise ActiveSync configuration is gmail:
    https://www.ibm.com/support/pages/overview-configuring-mail-services-maas360

    Not sure customer is going to be so happy with gmail on their Samsung phones. Are there any future plans to support the Samsung email app for AE Work Profile?

    Is MaaS360 Secure Mail supported for AE Work Profile?

    ------------------------------
    Arne Halsteinslid
    ------------------------------

    Original Message


  • 4.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Mon June 22, 2020 11:45 AM

    Hi Arne,

    The support for only gmail in the policy activesync settings is by design - it is Googles call.  There are alternative options for other mail agents via AppConfig and from the looks of it on the Google Play store, Samsung mail agent does support this.  This is from the Play store, however, and I can't say for sure if the Samsung email app on there is a 1:1 feature match for what ships on their devices (though I assume it would be the same).

    MaaS360 secure mail is also supported in the work profile (and on AE devices in general), so it is another viable alternative.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------

    Original Message


  • 5.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Tue June 23, 2020 05:26 AM
    Thank you Matt for clearing this up for me!

    I suspected only supporting gmail for AE ActiveSync was Google's call, yes.

    I configured AppConfig for the Samsung email app, and then migrated my Samsung A20 test device from DA to AE. After the migration I went into the MaaS360 Catalog and installed the Samsung email app, but I am having problems getting the AppConfig settings take effect: The Samsung email app is not receiving the AppConfig configuration.

    Well, actually, I did get it configured once. What I did then was enabling AE ActiveSync and then disabling AE Activesync, with a few 'Update Device Data' operations in-between. Suddenly, the wizard for configuring the Samsung email app then showed up, and it worked!

    In other words, I seem to be missing something. Can you please give me some directions on the sequence of operations required in order to make the AppConfig 'bite' after the migration to AE?

    ------------------------------
    Arne Halsteinslid
    ------------------------------

    Original Message


  • 6.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Wed June 24, 2020 02:08 PM

    Hi Arne,

    When the migration process is complete, it can take. few minutes for everything to sync up.  The primary MDM and compliance payloads usually hit the device fairly immediately, but apps and other configurations might take ~10 minutes to complete, depending on the amount of data.  The users can expedite this by navigating to the Settings within the MaaS360 agent and choosing to refresh manually from the menu.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------

    Original Message


  • 7.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Tue June 30, 2020 01:30 AM
    Hi!

    I believe I have now found the solution to my problem:

    The correct dialog for configuring the Samsung email app for the Android Enterprise Work Profile is not the one that is displayed by configuring AE ActiveSync. As a matter of fact, AE ActiveSync should not be configured at all, I finally realized!

    Instead, the AppConfig settings for the Samsung email app should be configured, and, after the Samsung email app has (automatically) been installed in the Work Profile, you must start it and select the 'Exchange' icon (in my case). The Samsung email app configuration/connect dialog will then be displayed, and providing you have configured AppConfig correctly you only need to input your password to get the app connected to your Exchange server!

    Is this correct?

    ------------------------------
    Arne Halsteinslid
    ------------------------------

    Original Message


  • 8.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Tue June 30, 2020 10:55 PM

    Hi Arne,

    This is correct - the AE Activesync should not be configured - it can lead to confusion on the end users part.  The app config settings will take over when they launch the correct mail agent, and finish the config process. 



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------

    Original Message


  • 9.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted Wed July 01, 2020 02:13 AM
    Great!

    Thank you Matt for this information!

    ------------------------------
    Arne Halsteinslid
    ------------------------------

    Original Message