Forum Discussion
Android : SSO Application Protection Policy - Edge
When a user launches our Play Store Application, authenticates (SSO, SAML2) on the app, they are presented with the form, enter the username and password, click sign in, and then the user is presented with "You can't get there from here" and a link to "Launch in Edge". When "Launch in Edge is clicked the user receives "ERR_UNKNOWN_URL_SCHEME" in the application. Outside of the application, Edge is launched, and is directed to login.microsoftonline.com:443, then is redirected to our home page/user control panel of our browser based application, not the application running on the device. It seems like Intune has defined our application as being browser based. Is this due to the application not interpreting the URL 'https-intunemam://login.microso.....' ? Would an exception be needed for our application to use the native browser? Any direction would be helpful.
After clicking "Sign In" - Launch in Edge page is presented.Error in application when "Launch in Edge" is clicked.
- Sorry to revive an older thread. We're running into an exact issue like this. Does anyone have any thoughts on how to resolve?
- Is the issue from the app protection policy + CA? If yes, if the app is not part of the approved apps in this list you can’t exclude from CA policy.
Did you check the user sign in logs in Azure and which CA is stopping the authentication?
Moe
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant
