Account Configuration
Account configuration payloads let you pre-configure email, calendar, contacts, directory, and web clip accounts on managed devices. Each account type is a separate payload within a configuration profile.
Email
Configure IMAP, POP, or Exchange email accounts. The device prompts the user for their password on first sync unless you include the password in the payload (not recommended for security).
| Key | Type | Description |
|---|---|---|
EmailAccountDescription | String | User-visible description of the account |
EmailAccountName | String | Display name for the account (e.g., "Work Email") |
EmailAccountType | String | EmailTypeIMAP, EmailTypePOP, or EmailTypeExchange |
EmailAddress | String | Full email address |
IncomingMailServerHostName | String | IMAP/POP server hostname |
IncomingMailServerPortNumber | Integer | IMAP/POP server port |
IncomingMailServerUseSSL | Boolean | Enable SSL for incoming mail |
IncomingMailServerUsername | String | Username for incoming server |
IncomingPassword | String | Password (omit to prompt user) |
OutgoingMailServerHostName | String | SMTP server hostname |
OutgoingMailServerPortNumber | Integer | SMTP server port |
OutgoingMailServerUseSSL | Boolean | Enable SSL for outgoing mail |
OutgoingMailServerUsername | String | Username for outgoing server |
OutgoingPassword | String | Password (omit to prompt user) |
PreventMove | Boolean | Prevent messages from being moved out of this account |
PreventAppSheet | Boolean | Prevent the account from appearing in the share sheet |
SMIMEEnabled | Boolean | Enable S/MIME signing and encryption |
SMIMESigningCertificateUUID | String | UUID referencing a certificate payload for signing |
SMIMEEncryptionCertificateUUID | String | UUID referencing a certificate payload for encryption |
Exchange ActiveSync
Microsoft Exchange integration for mail, calendar, contacts, and tasks.
| Key | Type | Description |
|---|---|---|
EmailAddress | String | User's email address |
Host | String | Exchange server hostname |
Port | Integer | Server port (default 443) |
UseSSL | Boolean | Enable SSL |
UserName | String | Domain\username or UPN |
Password | String | Password (omit to prompt user) |
MailNumberOfPastDaysToSync | Integer | Days of mail to sync (1–180) |
MailSyncEnabled | Boolean | Enable mail sync |
CalendarSyncEnabled | Boolean | Enable calendar sync |
ContactsSyncEnabled | Boolean | Enable contacts sync |
TasksSyncEnabled | Boolean | Enable tasks sync |
AllowRemoval | Boolean | Allow user to remove the account |
SMIMEEnabled | Boolean | Enable S/MIME |
SMIMESigningCertificateUUID | String | Certificate UUID for signing |
SMIMEEncryptionCertificateUUID | String | Certificate UUID for encryption |
LDAP
Connect to an LDAP directory server for contact lookup.
| Key | Type | Description |
|---|---|---|
LDAPAccountDescription | String | User-visible description |
LDAPAccountHostName | String | LDAP server hostname |
LDAPAccountPortNumber | Integer | Server port (default 389) |
LDAPAccountUseSSL | Boolean | Enable SSL (use port 636) |
LDAPAccountUserName | String | Bind DN |
LDAPAccountPassword | String | Bind password (omit to prompt) |
LDAPSearchSettings | Array of dictionaries | Search base and scope per setting |
LDAPSearchSetting | Dictionary | LDAPSearchSettingDesc (name), LDAPSearchSettingBase (search base DN), LDAPSearchSettingScope (LDAPSearchSettingScopeSubtree or LDAPSearchSettingScopeOneLevel) |
CalDAV
Connect to a CalDAV-compatible calendar server.
| Key | Type | Description |
|---|---|---|
CalDAVAccountDescription | String | User-visible description |
CalDAVHostName | String | CalDAV server hostname |
CalDAVPort | Integer | Server port |
CalDAVUseSSL | Boolean | Enable SSL |
CalDAVPrincipalURL | String | Principal URL (optional, auto-discovered if omitted) |
CalDAVUsername | String | Account username |
CalDAVPassword | String | Password (omit to prompt user) |
CardDAV
Connect to a CardDAV-compatible contact server.
| Key | Type | Description |
|---|---|---|
CardDAVAccountDescription | String | User-visible description |
CardDAVHostName | String | CardDAV server hostname |
CardDAVPort | Integer | Server port |
CardDAVUseSSL | Boolean | Enable SSL |
CardDAVPrincipalURL | String | Principal URL (optional, auto-discovered if omitted) |
CardDAVUsername | String | Account username |
CardDAVPassword | String | Password (omit to prompt user) |
Subscribed Calendar
Subscribe to a read-only iCalendar feed (.ics URL). The calendar is read-only — users cannot modify events.
| Key | Type | Description |
|---|---|---|
SubCalAccountDescription | String | User-visible description |
SubCalAccountHostName | String | Calendar feed hostname |
SubCalAccountUsername | String | Username (if authentication is required) |
SubCalAccountPassword | String | Password (omit to prompt) |
SubCalAccountUseSSL | Boolean | Enable SSL |
SubCalCalendarURL | String | Full URL to the .ics file |
Web Clip
Add a web app shortcut to the device home screen. Behaves like a progressive web app bookmark.
| Key | Type | Description |
|---|---|---|
URL | String | Full URL the clip opens |
Label | String | Display name on the home screen |
Icon | Data | PNG icon data (57x57 or 512x512 recommended) |
IsRemovable | Boolean | Allow user to delete the web clip |
Precomposed | Boolean | Do not add iOS gloss effect to the icon |
FullScreen | Boolean | Open in full-screen mode (hides Safari chrome) |
TargetApplicationBundleIdentifier | String | Bundle ID of the app to open the URL (e.g., com.apple.mobilesafari) |