Allow users to use the UPN to authenticate to Microsoft Exchange Online

If users in your environment are configured with UPNs that are different from their email address, complete the following steps for the BlackBerry Work, BlackBerry Notes, and BlackBerry Tasks client.
By default, BlackBerry UEM creates implicit UPNs for BlackBerry Dynamics apps (for example, samAccountName@Internal_domain_name) and uses the implicit UPN to authenticate to Microsoft Exchange Online. Consider the following scenario for userA using BlackBerry Work in your environment:
  • BlackBerry UEM creates an implicit UPN: userA@example.internaldomain.com
  • The Active Directory has the following information for userA and environment:
    • Domain sign in is example.internal.com
    • SamAccountName is userA
    • UserA email address format is firstname.lastname@example.com
    • UserA's UPN (explicit UPN) is userA@example.com
In this scenario, the external email domain and the internal domain are different. As a result, the explicit UPN in the Active Directory and the implicit UPN created by BlackBerry UEM don't match and authentication fails. For more information, visit support.blackberry.com/community to read article 58448.
  1. In the BlackBerry UEM console, on the menu bar, click Apps.
  2. Search for and click the app that you want to enable UPN for authentication.
  3. In the App configuration section, click an app configuration.
  4. Complete one or more of the following steps:
    1. For BlackBerry Work, on the Advanced Configuration tab, in the Exchange User Name section, select the UPN checkbox.
    2. For BlackBerry Notes and BlackBerry Tasks, on the Exchange Settings tab, in the Exchange User Name section, select the UPN checkbox.
  5. Click Save.