Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry Work 3.2
  3. Configuring Office 365 Modern Authentication for BlackBerry Dynamics Apps
  4. Troubleshooting
  5. Steps to migrate existing on-premises users to Microsoft Outlook Online using modern authentication
  6. Enable the mailbox migration flow

Enable the mailbox migration flow

  • Ensure that your 
    BlackBerry Dynamics
     connectivity profile is configured to route traffic for your email and authentication servers. Depending on your organization's routing requirements, this might mean one of the following:
    • The authentication and email traffic must route through your internal network
      : If your organization requires traffic to be routed internally (for example, your authentication server is not accessible publicly, or security requirements or conditional access policies require internal routing), you should ensure that the following hosts are added to the "Additional Servers" section of the connectivity profile (ensure that the route entries are configured for 
      BlackBerry Proxy
      ):
      • Internal 
        Microsoft Exchange Server
      • Microsoft Office 365
         server (outlook.office365.com)
      • Microsoft
        's Content Distribution servers (such as aad.cdn.mstauth.net) 
      • Authentication server (such as your 
        Active Directory
         Federation Services (ADFS) server, 
        PingFederate
         server, or Okta server) 
    • The authentication and email traffic does not have to route through your internal network
      :  If your organization does not require routing these connections internally, to improve performance have these connections routed Direct instead. If your Default Route is set to Direct, then you do not need to specify any servers. If the "Default Route" is set to "BlackBerry Proxy" or "Block", then you must add the servers specified above to the "Additional Servers" list, but specify the route type as "Direct" instead. 
    For more information, about the BlackBerry Dynamics connectivity profile settings, see the Administration Guide.
  • Ensure that your organization’s app configuration is set up for Modern Authentication, 
    Microsoft Exchange Online
     endpoints (
    Exchange ActiveSync
    , Exchange Web Services) and Autodiscover. For more information, see the Administration Guide, and the Modern Authentication Guide.
  1. On the menu bar, click 
    Apps
    .
  2. Click the 
    BlackBerry Work
     app.
  3. Click the name of your organization’s app configuration.
  4. On the 
    Advanced Configuration
     tab, select the 
    Migration Flow Enabled
     option.
  5. o set an expiry time, enter a date in the 
    Migration Flow Expiration Date
     field. After the date that you enter has passed, the Migration Flow Enabled setting is ignored.
  6. Click 
    Save
    .
  7. Assign the new app configuration to users who will be migrated to 
    Microsoft Exchange Online
    . If you are migrating users in batches, assign the new configuration prior to migrating users.
After you have migrated all of your users’ mailboxes, you can deselect the 
Migration Flow Enabled
 option.
To ensure that your environment is configured correctly, 
BlackBerry
 recommends performing a test migration with only a few users before you perform a larger migration of users.  
If a new 
BlackBerry Work
 user is activated against an app configuration that has the "Migration Flow Enabled" option set, the device will immediately pick up the modern authentication and 
Microsoft Exchange
 endpoint configurations.
BlackBerry recommends that you either create a new app configuration to apply to users who will be or already are migrated to 
Microsoft Office 365
, and have a separate app configuration for users who will continue to use an on-premises 
Microsoft Exchange Server
.