Enable the mailbox migration flow
- Ensure that yourBlackBerry Dynamicsconnectivity profile is configured to route traffic for your email and authentication servers. Depending on your organization's routing requirements, this might mean one of the following:
- The authentication and email traffic must route through your internal network: If your organization requires traffic to be routed internally (for example, your authentication server is not accessible publicly, or security requirements or conditional access policies require internal routing), you should ensure that the following hosts are added to the "Additional Servers" section of the connectivity profile (ensure that the route entries are configured forBlackBerry Proxy):
- InternalMicrosoft Exchange Server
- Microsoft Office 365server (outlook.office365.com)
- Microsoft's Content Distribution servers (such as aad.cdn.mstauth.net)
- Authentication server (such as yourActive DirectoryFederation Services (ADFS) server,PingFederateserver, or Okta server)
- The authentication and email traffic does not have to route through your internal network: If your organization does not require routing these connections internally, to improve performance have these connections routed Direct instead. If your Default Route is set to Direct, then you do not need to specify any servers. If the "Default Route" is set to "BlackBerry Proxy" or "Block", then you must add the servers specified above to the "Additional Servers" list, but specify the route type as "Direct" instead.
For more information, about theBlackBerry Dynamicsconnectivity profile settings, see the BlackBerry UEM Managing apps content. - Ensure that your organization’s app configuration is set up for Modern Authentication,Microsoft Exchange Onlineendpoints (Exchange ActiveSync, Exchange Web Services) and Autodiscover. For more information, see BlackBerry Work app configuration settings, and the Modern Authentication Guide.
- This feature requiresBlackBerry Workversion 3.2 or later. Older versions of the app will immediately have theMicrosoft Office 365settings applied to them. To view a list of installedBlackBerry Workclient version, see Export BlackBerry Dynamics app reports to a CSV file in theBlackBerry UEMMonitoring and reporting content.
- On the menu bar, clickApps.
- Click theBlackBerry Workapp.
- Click the name of your organization’s app configuration.
- On theAdvanced Configurationtab, select theMigration Flow Enabledoption.
- To set an expiry time, enter a date in theMigration Flow Expiration Datefield. After the date that you enter has passed, the Migration Flow Enabled setting is ignored.
- ClickSave.
- Assign the new app configuration to users who will be migrated toMicrosoft Exchange Online. If you are migrating users in batches, assign the new configuration prior to migrating users.
After you have migrated all of your users’ mailboxes, you can deselect the
Migration Flow Enabled
option.
To ensure that your environment is configured correctly,
BlackBerry
recommends performing a test migration with only a few users before you perform a larger migration of users. If a new
BlackBerry Work
user is activated against an app configuration that has the "Migration Flow Enabled" option set, the device will immediately pick up the modern authentication and Microsoft
Exchange
endpoint configurations. BlackBerry
recommends that you either create a new app configuration to apply to users who will be or already are migrated to Microsoft Office
365
, and have a separate app configuration for users who will continue to use an on-premises Microsoft Exchange
Server
.