Android app directory · Communication
Gmail is not only for Google accounts. It can also connect to a Microsoft Exchange ActiveSync server, and Google lets IT fill in that account for each person so nobody types server details. These are the keys Google documents for Gmail. The feature needs Gmail version 6.4 or later.
Nomidcom.google.android.gm Common setups
Copy a setup into the managed configuration of a policy, then adjust the values. Each one uses only keys explained below.
Set up the Exchange account for each person, with their own address and username, and token-based authentication.
{
"email_address": "%emailaddress%",
"exchange_username": "%username%",
"exchange_host": "corp.exchange.com",
"exchange_authentication_type": "allow_modern_authentication",
"exchange_ssl_required": true
}Authenticate against the server with a certificate stored in the work profile instead of a typed password.
{
"exchange_host": "corp.exchange.com",
"exchange_login_certificate_alias": "user-cert",
"exchange_trust_all_certificates": false
}Block extra accounts, sync three days of mail and add a standard signature.
{
"allow_unmanaged_accounts": false,
"default_exchange_sync_window": 2,
"default_signature": "Example Inc. support team"
}Managed configuration
Key names and value types come from the vendor’s documentation. The explanations are written by Nomid.
| Key | Type | What it does | Example |
|---|---|---|---|
| Account and server | |||
email_address | Email address or variable | The person's address. Google says you can use a wildcard string such as %emailaddress%, which your EMM fills in for each user. | %emailaddress% |
exchange_username | Username or variable | The username on the Exchange server, which can differ from the email address. | %username% |
exchange_host | Server address | Address of the Exchange ActiveSync server or proxy. The scheme is not needed and the port defaults to 443. | corp.exchange.com:443 |
exchange_device_id | Device identifier | A string that a management gateway can use to recognise the device in Exchange ActiveSync traffic. | %deviceid% |
| Security | |||
exchange_authentication_type | Choice: allow_modern_authentication, allow_basic_authentication | Picks token-based or password-based sign-in. Modern is the default and the better choice. | allow_modern_authentication |
exchange_login_certificate_alias | Certificate alias | Name of a certificate in the work profile keystore that proves who the person is to the Exchange server. | user-cert |
exchange_ssl_required | On or off | Uses SSL to talk to the server port you set. It is ignored on port 443 and defaults to true. | true |
exchange_trust_all_certificates | On or off | When false, Gmail checks server certificates, which matters for self-signed ones. Default is false. | false |
allow_unmanaged_accounts | On or off | Lets people add or remove other Exchange accounts. Data shared with those extra accounts is not controlled. | false |
| Mail behavior | |||
default_exchange_sync_window | Choice: 1 day, 2 three days, 3 week, 4 two weeks, 5 month | Sets how far back mail is synced. The default is 3, one week. | 3 |
default_signature | Signature text | Adds a signature to the bottom of every sent email. | Jane Doe, Example Inc. |
Deploy with Nomid
Find it on Google Play from the policy’s apps list and choose how it is installed.
In the policy, set the app’s managed configuration with the keys and values from this page.
Devices in the policy receive Gmail and its configuration on their next sync.
Questions
com.google.android.gm. Use it to find Gmail when you add it to a policy.
No. Google documents these keys for setting up a Microsoft Exchange ActiveSync account inside Gmail, so they do not add Google accounts.
Google says managed configuration is available from Gmail 6.4. The authentication type key needs a version released after November 15, 2019.
Google says Gmail then removes only the Exchange account from the device or work profile instead of wiping everything.
Add the app to a Nomid policy, set its configuration and choose its permissions.
