Forum Discussion
InTune Conditional Access mobile blocking Edge Sign In
Hello!
We are trying to setup MAM policies in InTune. We want only whitelisted applicaitons allowed. At the start, this will the the O365, and a few other internal SSO apps.
The issue is, in order to only allow access to 5 apps/systems, we need to put in a Block All, and then add exclusions. I've done this. However, I am unable to get the browser side working, as signining into Edge is blocked.
I want to use Edge as the browser app, but with the block all, it doesn't allow users to sign into edge, so they can't get to the sso sites via edge. I do know which CA policy is doing it, I just don't know which item to add to it for an exclusion.
Anyone know how to exclude the Edge sign in from Conditional Access? I'm not sure what service/applicaiton it actually is.
I've included a screen shot of the sign in log.
Thanks.
9 Replies
You can try "What if" feature to better understand how policies will affect your users.
The Conditional Access What If tool - Azure Active Directory - Microsoft Entra | Microsoft Docs
- I'm familiar with the What If, but Microsoft Edge is not an option in the apps to test. There is clearly a service tied to edge that is included, but I don't know which one so I can add it to the exclusion list.
- How did you target the conditional access policy? All cloud apps or office 365 apps ?
Rudy_Ooms_MVP The Conditional Access Policy is targeted to all Apps. Reason for this is because we need a specific whitelist of apps that are allowed to be accessed. In order to acocmplish this, the only way I've found to only alllow specific apps, is to block all, then add exclusions as needed.
- I know... but you cant select edge as cloud app in the exclude list ... :(... sometime ago that was the same for the Microsoft store API 🙂 ... Not sure if it could work... but a long long time ago I added the ID/GUID with powershell
https://call4cloud.nl/2020/11/the-conditional-access-experiment/
