Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=mac-user-policy-email-account

Email account configuration (macOS user policy)

The Email account configuration lets you set up an Exchange Web Services (EWS) account for Contacts, Mail, Reminders, and Calendar.

Requirement

To use the %_USERNAME_% and %_EMAILADDRESS_% placeholders as described below, you must configure the user’s Exchange Login and Email Address settings in Sophos Central Admin. See Users.

Setting Description
Account name The account name.
Server name For Exchange Online, enter outlook.office365.com.

For Exchange Server, enter your server URL.

Note that outlook.office365.com applies to the worldwide Microsoft 365 cloud. If you’re using a different Microsoft 365 cloud, such as Office 365 Germany, see the Microsoft document Office 365 URLs and IP address ranges.

Don’t enter the URL of the Sophos Mobile EAS proxy. Macs don’t support the ActiveSync protocol, which the EAS proxy uses.

Leave this field empty when using OAuth. The Exchange host is auto-discovered.
Domain For Exchange Online, leave this field empty.

For Exchange Server, enter the domain of the user account.
User The user's sign-in name.

For Exchange Online, this is usually the email address. Enter %_EMAILADDRESS_% to use the email address of the user assigned to the device.

For Exchange Server, enter %_USERNAME_% to use the name of the user assigned to the device.
Email address The email address of the account.

If you enter the variable %_EMAILADDRESS_%, the server replaces it with the actual email address.
Password The password for this account.

If you leave this field empty, users must enter the password on their devices.
Turn on OAuth 2.0 The account uses the OAuth 2 authentication framework, i.e. users authenticate with their Microsoft credentials.
OAuth authorization endpoint The URL of the OAuth endpoint handling requests for user authentication.

When you enter a value, the mail server isn’t auto-discovered. You must enter its URL in Server name.

Only enter a value if required by your authentication provider.
SSL/TLS The connection to the Exchange server is secured by SSL or TLS (depending on what the server supports).

We recommend that you select this check box.