You can configure an on-premises BEMS to communicate with the BlackBerry Proxy to authenticate GDAuth tokens in a BlackBerry UEM Cloud environment. When you configure your environment with an on-premises BEMS, you allow iOS and Android users to use the BEMS-Connect, BEMS-Presence, and BEMS-Docs services, in addition to the email notifications and BEMS-Docs service for BlackBerry Work.

If your environment requires users to access File Shares or CMIS-based repositories, configure BEMS-Docs in an on-premises BEMS. Enabling BEMS-Docs in BlackBerry UEM Cloud and in an on-premises BEMS in a BlackBerry UEM Cloud environment is not supported. You can configure BEMS with only one on-premises BlackBerry UEM or BlackBerry UEM Cloud environment at a time.

When you configure BlackBerry UEM Cloud to communicate with on-premises BEMS, you perform the following actions. Note that some of the actions might have already been completed when you configured BlackBerry UEM Cloud.

Step	Action
	Configure BlackBerry UEM Cloud in your environment.
	In the UEM management console, verify that you have installed and activated the BlackBerry Connectivity Node.
	If you are using Connect, install and configure the following on-premises BEMS services. BEMS-Connect BEMS-Presence BEMS-Docs
	In the BEMS Dashboard, Configure the BlackBerry Dynamics server in BEMS. Optionally, configure SSL communication between the BlackBerry Connectivity Node and the on-premises BEMS on port 17433. Export the BlackBerry Proxy certificate to the local computer Import the certificate to the BEMS Windows keystore Import the certificate into the Java keystore on BEMS
	In the BEMS Dashboard, Configure BEMS connectivity with BlackBerry Dynamics.
	In the UEM management console, assign the BlackBerry Connect and BlackBerry Presence Service apps to users. You can assign the apps using one of the following methods. For instructions, see Managing apps in the BlackBerry UEM Managing apps content. Assign an app to a user group Assign an app group to a user group Assign an app to a user account Assign an app group to a user account
	In the UEM management console, create a BlackBerry Dynamics Connectivity profile and add the app server that hosts the BlackBerry Connect and BlackBerry Presence Service, and Feature - Docs Service Entitlement apps.