Configure 

BlackBerry Notes

 and 

BlackBerry Tasks

 app settings

Select the 

Use of Kerberos Constrained Delegation in place of login/password

 option to use 

Kerberos

 Constrained Delegation as the login type for users. When 

Kerberos

 Contrained Delegation is used, users do not have to enter a password for 

Exchange ActiveSync

.

Select the 

Use client certificate in place of login/password

 option to require the use of certificates for login instead of a username and password. This is a requirement if certificate-based authentication is required for 

Microsoft Exchange Web Services

.

In the 

Server List Reshuffle Period (minutes)

 field, specify the frequency that the 

BEMS

 server list is reshuffled (if present), for load balancing purposes. The default setting is 10 minutes.

In the 

Server List Quarantine Period (minutes)

 field, if a 

BEMS

 server is not working, 

BlackBerry Tasks

 will wait this period before it retries. The default setting is 10 minutes.

In the 

Exchange Web Services Authentication Methods (iOS only)

 section, choose the authentication methods to be used: Negotiate, NTLM, or Basic. If only certain authentication methods are supported from 

Microsoft Exchange

, set those values to minimize the user setup time. (for example, if the EWS IIS Auth Setting is set to allow only NTLM, then select only NTLM above for an optimal setup experience.) If none are selected above, the default 

Microsoft Exchange

 setting will be used.

In the 

Microsoft Exchange Settings

 section, in the 

Exchange Domain

 field, specify the default 

Windows NT

 domain that 

BlackBerry Tasks

 will try to connect to automatically when users log in to 

BlackBerry Notes

 or 

BlackBerry Tasks

. If your server uses newer UPN (email@host.com) style login instead of the older (domain\user) style login, leave this field blank. In the 

Exchange Server

 field, specify the FQDN of the server, CAS Array, or Load Balancer that is responsible for providing 

Microsoft Exchange Web Services

. If you leave this field blank, 

BlackBerry Notes

 or 

BlackBerry Tasks

 uses assisted autodiscover through 

BEMS

 if 

BEMS

 is configured, and if 

BEMS

 is listed in the application server list for 

BlackBerry Notes

 or 

BlackBerry Tasks

. Enter only the FQDN of the 

Microsoft Exchange

 server. Do not include a protocol prefix such as https:// or a URI suffix.

In the 

Exchange Web Services User Name Formats (iOS only)

 section, choose which of the following user name formats to use to authenticate with 

Microsoft Exchange Web Services

: UPN, Domain\UserId, or SMTP. If only certain user name formats are supported from 

Microsoft Exchange

, set those values to minimize the user setup time. (for example, if the EWS Auth Settings are set to allow only SMTP but not UPN, then deselect UPN in the app setting.) If none are selected above, authentication with all user name formats will be attempted.

In the 

TLS Certificate Settings

 section, specify the user credential profile that contains the TLS certificate to be used to connect to 

Microsoft Exchange

. The name of the profile that you specify here must match the name of the user credential profile that was created in the 

BlackBerry UEM

 management console. For more information on user credential profiles, see Using user credential profiles to send certificates to devices.

Select the 

Use Office 365 Modern Authentication

 option to use modern authentication instead of basic authentication. Modern authentication enables 

BlackBerry Notes

 and 

BlackBerry Tasks

 to use sign-in features such as Multi-Factor Authentication, SAML-based third-party Identity Providers, and smart card and certificate-based authentication.

In the

 Office 365 Sign On URL

 field, specify the web address that 

BlackBerry Notes

 or 

BlackBerry Tasks

 should use when signing in to 

Office 365

. If you do not specify a value,

BlackBerry Notes

 or 

BlackBerry Tasks

 will use https://login.microsoftonline.com during setup.

In the 

Office 365 Tenant ID

 field, specify the tenant ID of the 

Microsoft Office 365

 server that you want 

BlackBerry Notes

 or 

BlackBerry Tasks

 to connect to during setup. If you do not specify a value, a value of "common" is used.

In the 

Azure App ID

 field, specify the 

Microsoft Azure

 app ID for 

BlackBerry Notes

 or 

BlackBerry Tasks

. For information on how obtain an 

Azure

 app ID, see Obtain an Azure app ID for BlackBerry Work.

In the 

Office 365 Resource

 field, specify the URL of the 

Microsoft Exchange Online

 server.

In the 

Redirect URI

 field, specify the URI that you entered in the 

Microsoft Azure

 portal.

Select the 

Proxy  Modern Authentication requests ( only)

 setting to force all 

Office 365

 Modern Authentication requests to go through the 

BlackBerry Proxy

 instead of connecting directly to the Internet.

Select the 

Allow users to perform app diagnostics

 option, to allow users to generate a diagnostics report and then email the results to their administrator.

For 

BlackBerry Tasks for iOS

 and 

BlackBerry Notes for iOS

 only, select the 

Tap a phone number to dial using native phone

 option to allow users to tap a phone number to dial using the device's native phone.

 For 

BlackBerry Tasks for Android

 and 

BlackBerry Notes for Android

, select the 

Grant permission to use the Tasks list widget (Android only)

 option to specify whether list widget can be used on 

Android

 devices.

Specify whether to allow incoming and outgoing attachments.

Specify the maximum size.

Specify the file extensions that are allowed or disallowed.