Skip Navigation

Allow users to use the UPN to authenticate to
Microsoft Exchange Online

If users in your environment are configured with UPNs that are different from their email address, complete the following steps for the
BlackBerry Work
,
BlackBerry Notes
, and
BlackBerry Tasks
client.
By default,
BlackBerry UEM
creates implicit UPNs for
BlackBerry Dynamics
apps (for example,
samAccountName
@
Internal_domain_name
) and uses the implicit UPN to authenticate to
Microsoft Exchange Online
. Consider the following scenario for userA using
BlackBerry Work
in your environment:
  • BlackBerry UEM
    creates an implicit UPN: userA@example.internaldomain.com
  • The
    Active Directory
    has the following information for userA and environment:
    • Domain sign in is example.internal.com
    • SamAccountName is userA
    • UserA email address format is
      firstname
      .
      lastname
      @example.com
    • UserA's UPN (explicit UPN) is userA@example.com
In this scenario, the external email domain and the internal domain are different. As a result, the explicit UPN in the
Active Directory
and the implicit UPN  created by
BlackBerry UEM
don't match and authentication fails. For more information, visit support.blackberry.com/community to read article 58448.
  1. In the
    BlackBerry UEM
    console, on the menu bar, click
    Apps
    .
  2. Search for and click the app that you want to enable UPN for authentication.
  3. In the
    App configuration
    section, click an app configuration.
  4. Complete one or more of the following steps:
    1. For
      BlackBerry Work
      , on the
      Advanced Configuration
      tab, in the
      Exchange User Name
      section, select the
      UPN
      checkbox.
    2. For
      BlackBerry Notes
      and
      BlackBerry Tasks
      , on the
      Exchange Settings
      tab, in the
      Exchange User Name
      section, select the
      UPN
      checkbox.
  5. Click
    Save
    .