# How to configure corporate Google accounts on iOS devices?

Last updated: July 24, 2026

This guide explains how to configure corporate Google/Gmail accounts on iOS, iPadOS, and macOS devices using a pre-built `.mobileconfig` file through ManageEngine MDM. Admins create an iOS/iPadOS or macOS profile, select Custom Configuration, and upload the provided configuration file after verifying it includes the correct PayloadType and a dynamic `%email%` variable. Publishing the profile then distributes the account setup to target devices, reducing manual configuration errors.

## Description

To streamline the setup of corporate Gmail accounts on iOS devices, you can now configure them using a pre-built configuration file (`.mobileconfig`) through ManageEngine MDM. This method ensures consistency and reduces the chances of misconfiguration across devices.

## Steps

- Log in to the MDM Console and navigate to **Device Management > Profiles**.
- Create or select a profile for **iOS/iPadOS** or **macOS**.
- Download the configuration file from [this link](https://workdrive.zohoexternal.com/external/6122bfe3e308264b599c900b2927011b423127ffe8d95527d26c9dde5d025a35/download?directDownload=true).
- After downloading, upload the configuration file by following the steps below:
  - Go to **Device Mgmt > Profiles > Create iOS/iPadOS Profile**.
  - Select the **Custom Configuration** option from the list of policies.
  - Upload the downloaded `.mobileconfig` file.
  - Verify that the file includes necessary configuration keys such as `PayloadType` set to `com.apple.google-oauth` and `EmailAddress` containing a dynamic variable like `%email%`.
  - Click **Publish** to save the profile.

## Sample Configuration File

You can copy the following content and save it with a `.mobileconfig` extension:

```xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>AccountDescription</key>
            <string>Google Account</string>
            <key>EmailAddress</key>
            <string>%email%</string>
            <key>PayloadDescription</key>
            <string>Configures a Google account</string>
            <key>PayloadDisplayName</key>
            <string>Google Account</string>
            <key>PayloadIdentifier</key>
            <string>com.apple.google-oauth.6685827E-1B07-4CB3-8893-FAE506EE7D8A</string>
            <key>PayloadType</key>
            <string>com.apple.google-oauth</string>
            <key>PayloadUUID</key>
            <string>6685827E-1B07-4CB3-8893-FAE506EE7D8A</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>MEMDM Google Account</string>
    <key>PayloadIdentifier</key>
    <string>B890E0EF-F893-46BE-914F-AF14E13361F0</string>
    <key>PayloadRemovalDisallowed</key>
    <false/>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>1485BEF4-9BFD-4634-89B8-E751FD934C40</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>
```

## Final Steps

- Save the file with a `.mobileconfig` extension.
- Upload the file to the **Custom Configuration** section of the iOS profile.
- Publish and distribute the profile to target devices.

### Need Help?

If you have any doubts or need assistance, contact support at:

- **On-Premises:** mdm-support@manageengine.com
- **Cloud:** mdmcloud-support@manageengine.com

## Frequently asked questions

### Do I need to manually build the configuration file for corporate Google accounts?

No — you can download a pre-built `.mobileconfig` file and upload it directly as a Custom Configuration profile, which reduces the chances of misconfiguration across devices.

### Which device platforms support this Google account configuration?

This is documented for iOS/iPadOS and macOS devices, configured through a Custom Configuration profile in MDM.

### What should I verify in the configuration file before publishing it?

Confirm the file includes `PayloadType` set to `com.apple.google-oauth` and that `EmailAddress` uses the dynamic variable `%email%`, so each user's own address is applied automatically.