# How to add app configurations for Zoho Mail iOS? ## Description App Configurations enable apps to be pre-configured with essential settings during installation, ensuring they are ready for immediate use without requiring any user intervention. This helps streamline the user experience by automatically setting up necessary app preferences while also allowing administrators to enforce security policies and configurations within the app based on enterprise requirements. ## Pre-requisites The [App Configurations XML](https://workdrive.zohoexternal.in/external/be5c00e456673a852af0bfcf83a7d2b0f3e9c064dff105d8f4fe6616c857b030/download?directDownload=true%20) file for Zoho Mail provided by the app developer. XML File Contains: ```xml serverURL http://developer.apple.com/ Device Managed By MDM Print mail content Share data Remote wipe data Restrict disabling passcode restrictMultiAccount mdm_restrict_login %conditional_access_token% ``` ## Steps to upload the Zoho Mail iOS App - On the MDM server, navigate to Device Management and select App Repository from the left-hand menu. Click + Add App and choose iOS App. Search for the Zoho Mail app in the App Repository. If the app is already available, select it and modify the existing configuration as required. ![Zoho Mail iOS App Repository](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_1.png) - Click on the App Configurations tab. Upload the updated XML file, which gets distributed with the app. ![Zoho Mail iOS App Configurations](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_2.png) - Once done, select Groups & Devices from the left pane. - Select the group(s)/device(s) to which the apps must be associated and click on Distribute Apps. The app is distributed to the App Catalog present in the ME MDM app on the device, from where the user can install the app. The app on installation becomes ready for use as it has been pre-configured. To install the apps without user intervention, [click here](https://www.manageengine.com/mobile-device-management/how-to/silent-installation-ios-apps.html). ## App Configuration Keys You can refer to each of the functions of the keys: ### Print Mail Content When the Print Mail Content option is set to true in the XML file, or when the corresponding checkbox is selected in the MDM console, end users will be able to access the Print option for email content. If this option is set to false or the checkbox is not selected, the Print option will be disabled for email content. ![Zoho Mail Print Option](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_3.png) ### Restrict Disabling Passcode When this option is set to true in the XML file, or when the corresponding checkbox is selected in the MDM console, the app enforces the device passcode policy. If the user removes the device passcode from the device settings and then attempts to access the Zoho Mail app, a Device Passcode Policy Enforcement prompt will be displayed, requiring the user to comply with the configured passcode policy before accessing the app. ![Zoho Mail Passcode Enforcement](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_4.png) ### Screenshot Access When the Screenshot Access option is set to false in the XML file, or when the corresponding checkbox is cleared in the MDM console, screenshot restrictions are enforced, preventing users from taking screenshots of content within the Zoho Mail app. When this option is set to true or the checkbox is selected, users are allowed to capture screenshots within the app. ![Zoho Mail Screenshot Restriction](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_5.png) ### Restrict Multi Account When the Restrict Multi Account option is set to true in the XML file, or when the corresponding checkbox is selected in the MDM console, users are restricted from adding or using multiple accounts within the Zoho Mail app. When this option is set to false or the checkbox is cleared, users are allowed to add and use multiple accounts in the app. ![Zoho Mail Multi Account Restriction](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_6.png) ### Share Data When the Share Data option is set to true in the XML file, or when the corresponding checkbox is selected in the MDM console, users are allowed to share data from the Zoho Mail app. When this option is set to false or the checkbox is cleared, data sharing is restricted, preventing users from sharing content from the app. ![Zoho Mail Data Sharing Restriction](https://cdn.manageengine.com/sites/meweb/images/mobile-device-management/images/zoho_mail_7.png) ### Remote Wipe Data Remote Wipe Data is an MDM configuration that acts as a forced logout control for managed applications. When this setting is enabled (set to true), the application checks this configuration during the next app launch. If enabled, all locally stored user data within the app is wiped, and the user is automatically signed out of the application. This ensures that sensitive enterprise data is removed from the device, preventing unauthorized access. #### Use Case Consider an employee using a managed corporate Zoho Mail App on their personal device. If the employee leaves the organization, loses the device, or access needs to be revoked immediately, the administrator can enable the Remote Wipe Data setting from the MDM console. During the next app launch: - All app data stored locally on the device is removed. - The user session is terminated. - The user is signed out of the application. This helps organizations protect corporate data without performing a full device wipe, making it ideal for BYOD environments where only enterprise app data needs to be removed. ### mdm_restrict_login The mdm_restrict_login setting uses a dynamic placeholder value. use the placeholder value %cond access token% which is used when conditional access is enforced in zoho directory. Zoho mail app usage is allowed only from managed devices or managed work profile.