New features summary

Ivanti Email+ app features and enhancements

• Email+ is now migrated to Microsoft Authentication Library: The Email+ app is now migrated from Microsoft Azure Active Directory Authentication Library (ADAL) to Microsoft Authentication Library (MSAL) to support Microsoft Conditional Access. The Email+ users using Sentry in Active Sync Mode should use Sentry version 9.20.0 and later. For more information, see Ivanti Email+Customers using Sentry must upgrade their Sentry version 9.20 or above.

• Tab bar position change starting iPadOS 18: The position of the tab bar is moved from the bottom of the screen to float over content at the top of the screen.

• Azure Conditional Access: The Email+app now supports Azure Conditional Access and Passwordless Authentication. For more information, see Configuring Azure Conditional Access (Optional)

Ivanti Email+ administrator features and enhancements

• New KVP for Web View in Email+ Configurations: The admin can now use optional KVP msal_internal_web_view to switch from Safari to internal web view for Email+ configurations with Per-App VPN. It is useful if Safari disrupts VPN during authentication. For more information, see Key-value pairs for customization Ivanti Email+ for iOS (Cont.)

• email_address key-value pair is used for authentication: The email_address key-value pair value is now used for authentication instead of email_exchange_username. This change is part of the Microsoft Authentication Library (MSAL) which is now used instead of the deprecated Microsoft Azure Active Directory Authentication Library (ADAL). Thus, email_address and email_exchange_username should have same values for upgrade to Email+ 5.0.0.

• New KVP added for Conditional Access:: The following KVPs are added to Email+ 5.0.0 release.

  • msal_client_id: Allows replacing the default application ID used by MSAL (MicrosoftAuthentication Library) with a custom value.

  • msal_resource_scope: Defines the resource scopes required by MSAL (Microsoft AuthenticationLibrary) to acquire access tokens for protected resources. Multiple scopes should be provided as a single comma-separated string. For example, user.read, mail.read, and so on.

  • msal_redirect_URL: Allows URL redirection for MSAL.

    These KVPs are optional and required only if the customer has Email+ Azure application in their Azure tenant.

• New KVP added to disable Microsoft Authenticator launch for authorization: The admin can now disable Microsoft Authenticator launch with msal_disable_authenticator_use KVP.

• New KVP added for troubleshooting: Two new KVPs are added to configure additional logging for troubleshooting.

  • allow_logging_insecure: Allows detailed logging with sensitive details. Enable only if requested by Ivanti for issue debugging. For more information, see Key-value pairs for customization Ivanti Email+ for iOS (Cont.)

• allow_logging_responses: It allows to record requests and responses. Enable only if requested. For more information, see Key-value pairs for customization Ivanti Email+ for iOS (Cont.)

Ivanti Email+ app features and enhancements

• View mail attachments in full screen landscape mode: The mail attachments are now viewable in full screen and landscape mode on iPad devices.

• Support for photo size selection for attachments: Email attachment size can now be selected when adding images from the device gallery to emails. The following re-size options are available:

  • Small (320p)

  • Medium (720p)

  • Large (1280p)

  • Actual Size

    No modification is required for the original image.
    

• Support for pinch to zoom: The Calendar tab now supports the pinch to zoom gesture.

• Support for iOS 15 deprecated: The Email+ 4.15.0 app does not support iOS version 15.

• ActiveSync 16 updated: ActiveSync 16 is now enabled by default.

• Font support and style: Body style is now applied to text in the mail body as a built-in feature.

Ivanti Email+ administrator features and enhancements

• Enhanced the limit_contact_export_to key-value pair: The name_number value for the limit_contact_export_to KVP now includes Phonetic First Name and Phonetic Last Name along with name and number information when contact information is exported.

• The eas_16 value is now enabled by default: The ActiveSync 16 protocol is now enabled by default. To disable and switch back to ActiveSync 14, the eas_16 value is moved from enabled_features to disabled_features key-value pair.