Configure

BlackBerry Tasks

and

BlackBerry Notes

app settings

Select the

Use of Kerberos Constrained Delegation in place of login/password

option to use

Kerberos

Constrained Delegation as the login type for users. When

Kerberos

Contrained Delegation is used, users do not have to enter a password for

Exchange ActiveSync

.

Select the

Use client certificate in place of login/password

option to require the use of certificates for login instead of a username and password. This is a requirement if certificate-based authentication is required for

Microsoft Exchange Web Services

.

In the

Server List Reshuffle Period (minutes)

field, specify the frequency that the

BEMS

server list is reshuffled (if present), for load balancing purposes. The default setting is 10 minutes.

In the

Server List Quarantine Period (minutes)

field, if a

BEMS

server is not working,

BlackBerry Tasks

will wait this period before it retries. The default setting is 10 minutes.

In the

Exchange Web Services Authentication Methods (iOS only)

section, choose the authentication methods to be used: Negotiate, NTLM, or Basic. If only certain authentication methods are supported from

Microsoft Exchange

, set those values to minimize the user setup time. (For example, if the EWS IIS Auth Setting is set to allow only NTLM, then select only NTLM above for an optimal setup experience.) If none are selected above, the default

Microsoft Exchange

setting will be used.

In the

Microsoft Exchange Settings

section, in the

Exchange Domain

field, specify the default

Windows NT

domain that

BlackBerry Tasks

will try to connect to automatically when users log in to

BlackBerry Notes

or

BlackBerry Tasks

. If your server uses newer UPN (email@host.com) style login instead of the older (domain\user) style login, leave this field blank. In the

Exchange Server

field, specify the FQDN of the server, CAS Array, or Load Balancer that is responsible for providing

Microsoft Exchange Web Services

. If you leave this field blank,

BlackBerry Notes

or

BlackBerry Tasks

uses assisted autodiscover through

BEMS

if

BEMS

is configured, and if

BEMS

is listed in the application server list for

BlackBerry Notes

or

BlackBerry Tasks

. Enter only the FQDN of the

Microsoft Exchange

server. Do not include a protocol prefix such as https:// or a URI suffix.

In the

Exchange Web Services User Name Formats (iOS only)

section, choose which of the following user name formats to use to authenticate with

Microsoft Exchange Web Services

: UPN, Domain\UserId, or SMTP. If only certain user name formats are supported from

Microsoft Exchange

, set those values to minimize the user setup time. (For example, if the EWS Auth Settings are set to allow only SMTP but not UPN, then deselect UPN in the app setting.) If none are selected above, authentication with all user name formats will be attempted.

In the

TLS Certificate Settings

section, specify the user credential profile that contains the TLS certificate to be used to connect to

Microsoft Exchange

. The name of the profile that you specify here must match the name of the user credential profile that was created in the

BlackBerry UEM

management console. For more information on user credential profiles, see Sending client certificates to devices and apps using user credential profiles Using user credential profiles to send certificates to devices.

Select the

Use Office 365 Modern Authentication

option to use modern authentication instead of basic authentication. Modern authentication enables

BlackBerry Notes

and

BlackBerry Tasks

to use sign-in features such as Multi-Factor Authentication, SAML-based third-party Identity Providers, and smart card and certificate-based authentication.

In the

Office 365 Sign On URL

field, specify the web address that

BlackBerry Notes

or

BlackBerry Tasks

should use when signing in to

Office 365

. If you do not specify a value,

BlackBerry Notes

or

BlackBerry Tasks

will use https://login.microsoftonline.com during setup.

In the

Office 365 Tenant ID

field, specify the tenant ID of the

Microsoft Office 365

server that you want

BlackBerry Notes

or

BlackBerry Tasks

to connect to during setup.

In the

Azure App ID

field, specify the

Microsoft Entra ID

app ID for

BlackBerry Notes

or

BlackBerry Tasks

. For information on how obtain an

Entra

app ID, see Obtain an Azure app ID for BlackBerry Work.

In the

Office 365 Resource

field, specify the URL of the

Microsoft Exchange Online

server.

In the

Redirect URI

field, specify the URI that you entered in the

Microsoft Entra ID

portal.

Select the

Proxy Modern Authentication requests ( only)

setting to force all

Office 365

Modern Authentication requests to go through the

BlackBerry Proxy

instead of connecting directly to the Internet.

Select the

Allow users to perform app diagnostics

option, to allow users to generate a diagnostics report and then email the results to their administrator.

Select the

Enable DLP Watermark

option to display a user’s username and the date and time as a watermark on all screens in

BlackBerry Notes

or

BlackBerry Tasks

.

For

BlackBerry Tasks for iOS

and

BlackBerry Notes for iOS

only, select the

Tap a phone number to dial using native phone

option to allow users to tap a phone number to dial using the device's native phone.

For

BlackBerry Tasks for Android

and

BlackBerry Notes for Android

, select the

Grant permission to use the Tasks list widget (Android only)

option to specify whether the list widget can be used on

Android

devices.

Specify whether to allow incoming and outgoing attachments.

Specify the maximum size.

Specify the file extensions that are allowed or disallowed.