IBM Security MaaS360

Expand all | Collapse all

Unable to get AE Work Profile ActiveSync to Samsung email app configured

  • 1.  Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 20 days ago
    Hi!

    I am having a problem getting the Samsung email app automatically configured in the Android Enterprise Work Profile through ActiveSync after having migrated a Samsung A20 from Device Admin to Android Enterprise using the v7.10 (Beta) MaaS360 agent.

    The Samsung email app is automatically configured through ActiveSync in Device Admin mode without problems (before migrating to Android Enterprise Work Profile), but the process is stuck when pressing the 'Configure' button after the migration to Android Enterprise Work Profile mode, please see attached picture 'AE ActiveSync config.JPG'.

    When pressing the 'Configure' button in Device Admin mode (before migrating to Android Enterprise Work Profile), the process continues and completes, please see attached picture 'DA ActiveSync config.JPG'.

    What puzzles me is the fact that only Username and Domain are shown on the Configure wizard in AE mode, whereas Email Address, Username, Domain and Password are all shown on the Configure wizard in DA mode.

    Below are the full set of config settings for both modes. I have tested with 'Authentication Mode' both (blank), Basic and Modern, but to no avail!

    Please advice!

    SECURITY > Default Android MDM Policy > Device Settings > ActiveSync
    - Host name of the Server = (FQDN of server)
    - Use SSL = (checked)
    - Account = Use Device Enrollment Credentials
    - Identity Certificate = (blank)
    - SMIME Signing Certificate = (blank)
    - SMIME Encryption Certificate = (blank)
    - Account Display Name = HME E-post
    - Set as Default Account = (blank)
    - Accept All Certificates = Yes

    SECURITY > Default Android MDM Policy > Android Enterprise Settings > ActiveSync
    - Server Name = (FQDN of server)
    - Server Type = Exchange
    - Use SSL = (checked)
    - Email Address = (blank)
    - Username = (blank)
    - Domain = (blank)
    - Accept All Server Cert. = (checked)
    - Authentication Type = Password
    - Authentication Mode = (blank)/Basic/Modern - All tested
    - Default Signature = (blank)
    - Allow Tasks = Yes
    - Max. Attachment Size(KB) = (blank)

    ------------------------------
    Arne Halsteinslid
    ------------------------------


  • 2.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 17 days ago

    The below information was posted in a different  discussion:

    *************************************************

    Hi Arne,

    Good to hear that v7.10 has solved the problem!

    As for the AE Active Sync configuration, just wanted to let you know that we only support Gmail through policy configuration. For any other email clients like Samsung email/Outlook, a manual setup would be needed.

    Do let me know if there's anything where I can be of assistance.

    Regards,


    ------------------------------
    Anish Kothari
    Software Developer - Android,
    IBM MaaS360
    ------------------------------

    *************************************************

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 3.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 17 days ago
    I notice the following web page says the only mail agent supported for Android Enterprise ActiveSync configuration is gmail:
    https://www.ibm.com/support/pages/overview-configuring-mail-services-maas360

    Not sure customer is going to be so happy with gmail on their Samsung phones. Are there any future plans to support the Samsung email app for AE Work Profile?

    Is MaaS360 Secure Mail supported for AE Work Profile?

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 4.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 16 days ago

    Hi Arne,

    The support for only gmail in the policy activesync settings is by design - it is Googles call.  There are alternative options for other mail agents via AppConfig and from the looks of it on the Google Play store, Samsung mail agent does support this.  This is from the Play store, however, and I can't say for sure if the Samsung email app on there is a 1:1 feature match for what ships on their devices (though I assume it would be the same).

    MaaS360 secure mail is also supported in the work profile (and on AE devices in general), so it is another viable alternative.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 5.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 16 days ago
    Thank you Matt for clearing this up for me!

    I suspected only supporting gmail for AE ActiveSync was Google's call, yes.

    I configured AppConfig for the Samsung email app, and then migrated my Samsung A20 test device from DA to AE. After the migration I went into the MaaS360 Catalog and installed the Samsung email app, but I am having problems getting the AppConfig settings take effect: The Samsung email app is not receiving the AppConfig configuration.

    Well, actually, I did get it configured once. What I did then was enabling AE ActiveSync and then disabling AE Activesync, with a few 'Update Device Data' operations in-between. Suddenly, the wizard for configuring the Samsung email app then showed up, and it worked!

    In other words, I seem to be missing something. Can you please give me some directions on the sequence of operations required in order to make the AppConfig 'bite' after the migration to AE?

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 6.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 14 days ago

    Hi Arne,

    When the migration process is complete, it can take. few minutes for everything to sync up.  The primary MDM and compliance payloads usually hit the device fairly immediately, but apps and other configurations might take ~10 minutes to complete, depending on the amount of data.  The users can expedite this by navigating to the Settings within the MaaS360 agent and choosing to refresh manually from the menu.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 7.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 9 days ago
    Hi!

    I believe I have now found the solution to my problem:

    The correct dialog for configuring the Samsung email app for the Android Enterprise Work Profile is not the one that is displayed by configuring AE ActiveSync. As a matter of fact, AE ActiveSync should not be configured at all, I finally realized!

    Instead, the AppConfig settings for the Samsung email app should be configured, and, after the Samsung email app has (automatically) been installed in the Work Profile, you must start it and select the 'Exchange' icon (in my case). The Samsung email app configuration/connect dialog will then be displayed, and providing you have configured AppConfig correctly you only need to input your password to get the app connected to your Exchange server!

    Is this correct?

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 8.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 8 days ago

    Hi Arne,

    This is correct - the AE Activesync should not be configured - it can lead to confusion on the end users part.  The app config settings will take over when they launch the correct mail agent, and finish the config process. 



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 9.  RE: Unable to get AE Work Profile ActiveSync to Samsung email app configured

    Posted 8 days ago
    Great!

    Thank you Matt for this information!

    ------------------------------
    Arne Halsteinslid
    ------------------------------