• It is possible to configure one Exchange account per managed Outlook app using this method

• You need to have Apple iPhone(s) or iPad(s) enrolled in your site
• The device(s) must have a passcode set before the account can be added
• Ensure your device(s) meet the iOS version requirement of the Outlook app (check from the App Store)

We recommend using the Apple VPP version of the Outlook app if you have Apple Business Manager configured to your site. If you don't have Apple Business Manager configured, then you have to add the App Store version as follows:

1. Go to the Management > Applications page in GoTo Resolve MDM, and use the Add > iOS application button to add the Outlook app to your GoTo Resolve MDM site. For instructions, see How to Add iOS App Store Apps. We recommend checking the "Remove application when device is unenrolled" option. This will remove Outlook and the device user's access to the email if the device is unenrolled from Mobile Device Management at some point.
2. Open the Outlook application's Configuration tab and add the following configuration keys:

   Setting	Value
   com.microsoft.outlook.EmailProfile.EmailAddress	This key specifies the email address used for sending and receiving email. It is recommended to use a variable here. For example, the Exchange email address from the User page (see picture).
   com.microsoft.outlook.EmailProfile.EmailUPN	This key specifies the User Principal Name or username for the email profile that is used to authenticate the account. It is easiest to use a variable here if you are planning to deploy the app to multiple devices.
   com.microsoft.outlook.EmailProfile.AccountType	This key specifies the account type being configured based on the authentication model. Write "ModernAuth" to the value field.
   com.microsoft.outlook.EmailProfile.ServerHostName	This key specifies the hostname of your Exchange server. For example, "mail.company.com". If you are using Office 365, you don't need to define this key.

   Note: For more information about the configuration keys, see Microsoft documentation.
3. You don't need to manually enter email addresses and user names to the User pages in GoTo Resolve MDM if you import the data from Microsoft Active Directory or use a CSV file. See importing user data to GoTo Resolve MDM from Microsoft Active Directory and Importing data from CSV for more. If you import the usernames and email addresses from Microsoft AD, remember to use the variables imported from Active Directory for the configuration keys as shown in the picture below.
   
4. After you have configured the app, go to the Management > Devices page. Choose the desired devices and use the Deploy > Deploy application button to distribute the pre-configured email client app to the devices. The device will ask for the user's approval on unsupervised devices before installing the app.
5. You can follow up on the deployment from the Management > Action log page, or the Device page of each target device.

You can deploy the webmail (OWA) link to iOS devices in case you have any older iPads or iPhones which do not support the Outlook app.

1. Go to Management > Configuration Profiles and create a Web Clip configuration profile.
2. The URL field defines the address where users can access their accounts. For Office 365 it is something like https://outlook.office365.com/owa/yourdomain.com
3. After configuration, deploy the web clip to the devices and a bookmark to that link will appear on the device's Home screen. The user needs to enter their username and password to access the email.

Microsoft has retired the basic authentication and replaced it with the Modern authentication that is based on OAuth2. The OAuth is providing more secure way for user authentication and simplifies the enabling and enforcing the multifactor authetication (MFA). Read how to enable OAuth on Mail for Exchange with configuration profiles.