Enable the use of an alternate email address to authenticate to the Docs service

You can configure BEMS to allow users to authenticate to Microsoft SharePoint Online with an email address that is different from the email address that was used to install and activate BlackBerry Work. Complete this task only if your environment is configured to use one of the following:
  • If your environment is configured to use Windows authentication, you can configure BEMS to use the UserPrincipalName (UPN), email address, or any other Active Directory attribute to authenticate to Microsoft SharePoint Online. By default, the UserPrincipalName attribute is used.
  • If your environment uses modern authentication, you can configure BEMS to disable validating the email address when users authenticate to Microsoft SharePoint Online or the environment uses Entra-IP.
  1. Sign in to the computer that is running the Docs service.
  2. In a browser, navigate to the BEMS Karaf Console Configuration web site at https://localhost:8443/system/console/configMgr and login as administrator with the appropriate Microsoft Active Directory credentials.
  3. On the menu, click Main > Gogo.
  4. Type one of the following commands:
    Task Attribute Description
    Authenticate to Microsoft SharePoint Online using mail docs:config SAMLUsernameAttribute mail Allows users to use their email address to authenticate to Microsoft SharePoint Online instead of the user's userPrincipalName.

    To use the users' UPN again to authenticate, type docs:config SAMLUsernameAttribute UserPrincipalName
    Disable user validation when authenticating to one of the following:
    • Microsoft SharePoint Online configured for modern authentication
    • Entra-IP
    		 docs:config modernauth.uservalidation.skip 1 Disables validation of the user's email address.