
OAuth: Enable uses Open Authorization (OAuth) communication when sending emails, receiving emails, and communicating with Exchange. SSL: Enable uses Secure Sockets Layer (SSL) communication when sending emails, receiving emails, and communicating with the Exchange server. For more information, see Use derived credentials in Microsoft Intune.Īzure multi-factor authentication isn't supported.
Derived credential: Use a certificate that's derived from a user's smart card. Username and Password: Users are prompted to enter their user name and password. This option provides the most secure and better experience for your users. Certificate: Select a client SCEP or PKCS certificate profile you previously created to authenticate the Exchange connection. Primary SMTP address: Use the primary SMTP address to sign in to Exchange, such as method: Choose how users to authenticate to the email server. User principal name: Use the full principal name as the email address, such as or user1. Make sure your users have email addresses that match the attribute you select. Custom domain name to use: Enter a value that Intune uses for the domain name, such as or contoso.Įmail address attribute from AAD: Choose how the email address for the user is generated. User domain name attribute from AAD: Choose to get the Full domain name ( ) or the NetBIOS name ( contoso) attribute of the user.Ĭustom: Get the attributes from a custom domain name. User domain name source: Choose AAD (Azure Active Directory) or Custom.ĪAD: Get the attributes from Azure AD. User Principal Name: Gets the name, such as user1 or Primary SMTP address: Gets the name in email address format, such as sAM Account Name: Requires the domain, such as domain\user1. Intune dynamically generates the username that's used by this profile.
Username attribute from AAD: This name is the attribute Intune gets from Azure Active Directory. This name is shown to users on their devices. Exchange ActiveSync account settingsĮmail server: Enter the host name of your Exchange server.Īccount name: Enter the display name for the email account. These settings use the Apple ExchangeActiveSync payload (opens Apple's web site). For more information on the enrollment types, see iOS/iPadOS enrollment.
These settings are available for all enrollment types.