Customers have always turned to enterprise mobile email clients like Workspace ONE Boxer as a way to provide consistent productivity, management and security features on any device, including unmanaged personal devices.
Boxer for iOS and Android has always had the ability for end users to manually add personal accounts on top of their primary email account that is configured in the app via IT. Though this is helpful for viewing personal and work email in the same app, we know that many users also need access to multiple enterprise mailboxes to get the job done.
As the crafters of an enterprise email client, we accepted the challenge to bring additional accounts to Boxer while keeping security and usability at the forefront of our choices.
So, we are excited to share news about our support for these important features—the ability for admins to configure and manage multiple email accounts, and support for delegated and shared accounts.
What are my options for adding multiple accounts to Boxer?
To get started, let’s make sure everybody is on the same page. This blog will be covering a couple different types of enterprise email accounts:
• Multiple Managed Accounts: Refers to adding an additional one or two accounts to Boxer that are not in the existing domain but still need Data Loss Prevention policies.
• Shared Accounts: Refers to users in a company that are using a shared account for something like a team mailbox and calendar or a support email address.
• Delegated Accounts: Refers to what is often an executive assistant use case.
We’re covering iOS and Android, and additional requirements are identified based on what kinds of accounts you need to add. Keep on reading to learn about the different options and how to configure them.
Multiple Managed Accounts
Multiple Managed Accounts is exactly what it sounds like. As of Boxer 5.21, end users have the option to add a second or even third managed account to Boxer in addition to the one that has already been configured.
One example of when you might use multiple managed accounts is when a company has bought another company and the employee has an email, contacts and calendar in both companies, but there are Data Loss Prevention or DLP settings that need to be adhered to for access to both emails. For example, we have some employees that have an @dell.com email as well as an @vmware.com email, and this allows them to have both emails pre-configured when they enroll.
• UEM Console 2008+
• Workspace ONE Boxer for iOS or Android 5.21+
• SSO needs to be enabled and configured
In the UEM Console, under the Boxer App Assignment —> Email Settings, the “+ Add” tab button allows you to configure Multiple Managed Accounts.
Boxer’s Email Settings screen about to setup a second account.
All of the items in this menu are specific to the account in Boxer. This is where you can configure the email address which can be pulled from additional Active Directory Attributes, as well as configure settings for the password, signature, spam, phishing, S/MIME, Email Classification, Notifications and more.
In order for this to be a scalable solution, it is recommended that you use the custom attributes in an enrolled user’s advanced tab. This allows for you to map the custom attributes for their secondary account as lookup values.
On Device (iOS & Android)
Once Multiple Managed Accounts has been setup and configured, users will be prompted in Boxer to sign into their newly added accounts. These new accounts will be fully integrated into all screens of Boxer, such as Mail, Calendar, Files and Contacts.
Shared and Delegated Accounts
Delegated mailboxes and calendars are often used for executive assistants that need to manage another employee’s mailbox and/or calendar. This is the “send on behalf of” functionality. Shared mailboxes and shared calendars are typically used when a team needs to work out of one mailbox and/or calendar. This is the “send as” functionality, where users with access to an account are impersonating the account. These features are an example of the value the Boxer email client can bring over native mobile email clients.
The setup and requirements are the same for delegated accounts and shared accounts. The main difference is when you are in the Exchange admin console. In addition to the “Full Access” permission, you can set the “Send as” or “Send on behalf of” if you want shared or delegate permission.
Boxer pulls delegate permissions from your Exchange server. If you have your executives and executive administrators already set up via the Exchange admin center, then you are already good to go. Note that we are not supporting sharing settings that are configured from desktop clients—this does not provide the correct permissions, so setup must be completed from the Exchange admin center.
Make sure you have the following configured:
• Exchange 2013+ or Office 365
• On the Exchange side, admins need to have EWS enabled
• If you are using the Secure Email Gateway (SEG), this also needs to have EWS enabled
• Authentication needs to be the same for EAS and EWS
• Delegators and Delegates need to be in the same Active Directory
• Exchange admin center must be used with “Full Access”. For shared, you need “Send as” permission, whereas delegation requires the “Send on Behalf of” permission
Once you have all this set up, delegates can add their delegator’s accounts in Boxer. This can be done by going to Settings, adding a new account and then searching the Global Address List (GAL) for their delegators. From here, users will see what permissions that they have for the account (mailbox, calendar or both). Scroll down for short videos of Boxer adding shared/delegated accounts on iOS and Android.
We hope you enjoy the additional mailbox features that we have brought. Make sure to check out the Boxer Admin Guide for full details on configuration as well as the most frequently asked questions regarding setup and configuration.
iOS Boxer Adding a Shared/Delegated Account
Android Boxer Adding a Shared/Delegated Account