- Configuring BlackBerry UEM for the first time
- Changing BlackBerry UEM certificates
- Configuring BlackBerry UEM to send data through a proxy server
- Configuring connections through internal proxy servers
- Connecting to your company directories
- Configuring Microsoft Active Directory authentication in an environment that includes Exchange linked mailboxes
- Connect to a Microsoft Active Directory instance
- Connect to an LDAP directory
- Enable directory-linked groups
- Enabling onboarding
- Synchronize a company directory connection
- Removing a connection to a company directory
- Connecting to an SMTP server to send email notifications
- Configuring database mirroring
- Connecting BlackBerry UEM to Microsoft Azure
- Enable access to the BlackBerry Web Services over the BlackBerry Infrastructure
- Obtaining an APNs certificate to manage iOS and macOS devices
- Configuring BlackBerry UEM for DEP
- Configuring BlackBerry UEM to support Android Enterprise devices
- Simplifying Windows 10 activations
- Migrating users, devices, groups, and other data from a source server
- Prerequisites: Migrating users, devices, groups, and other data from a source server
- Connect to a source server
- Considerations: Migrating IT policies, profiles, and groups from a source server
- Migrate IT policies, profiles, and groups from a source server
- Complete policy and profile migration for BlackBerry Dynamics-activated users
- Considerations: Migrating users from a source server
- Migrate users from a source server
- Considerations: Migrating devices from a source server
- Migrate devices from a source server
- Migrating DEP devices
- Configuring BlackBerry UEM to support BlackBerry Dynamics apps
- Manage BlackBerry Proxy clusters
- Configure Direct Connect using port forwarding
- Configure BlackBerry Dynamics properties
- Configure communication settings for BlackBerry Dynamics apps
- Sending BlackBerry Dynamics app data through an HTTP proxy
- Configuring Kerberos for BlackBerry Dynamics apps
- Integrating BlackBerry UEM with Cisco ISE
- Requirements: Integrating BlackBerry UEM with Cisco ISE
- Create an administrator account that Cisco ISE can use
- Add the BlackBerry Web Services certificate to the Cisco ISE certificate store
- Connect BlackBerry UEM to Cisco ISE
- Example: Authorization policy rules for BlackBerry UEM
- Managing network access and device controls using Cisco ISE
Enabling onboarding
Onboarding allows you to automatically add user accounts to
BlackBerry UEM
based on user membership in a universal or global company directory group. User accounts are added to BlackBerry UEM
during the synchronization process.You can also choose to automatically send onboarded users an email message and activation passwords or access keys for
BlackBerry
Dynamics
apps.Offboarding
If you enable onboarding, you can also choose to configure offboarding. When a user is disabled in
Microsoft Active
Directory
or removed from all company directory groups in the onboarding directory groups, BlackBerry UEM
can automatically offboard the user in any of the following ways:
- Delete work data or all data from the users' devices
- Delete the user account fromBlackBerry UEM
You can use offboarding protection to delay the deletion of device data or user accounts to avoid unexpected deletions because of directory replication latency. By default, offboarding protection delays offboarding actions for two hours after the next synchronization cycle.
The offboarding settings also apply to existing directory users in
BlackBerry UEM
. It is recommended that you click the preview icon to generate the directory synchronization report and verify the changes.Synchronization
After you enable offboarding, during the next synchronization, the offboarding rules are applied to any users that you manually added in the management console before offboarding was turned on and that are not members of any onboarding directory-linked groups.
After you enable onboarding, you can manually add users to
BlackBerry UEM
even if they are already in a directory-linked group. If offboarding is enabled, users that you manually add to BlackBerry UEM
will have offboarding rules applied to their devices when the next synchronization occurs if they are not members of an onboarding synchronization group at the time of the synchronization.