Intune MAM Edge policy

Question

Dear Community,&nbsp;We have Edge as a default browser to control and manage apps, documents and corporate stuff for IOs and Android, it works well.&nbsp;&nbsp;But, we have a situation like when user's using Edge to order something in the E-commerce sites which routing to banking app installed on the IOS device, and unable to make the payment process due to banking app not supporting Edge, asking to install Chrome or Safari.&nbsp;&nbsp;Anything could help this scenario from the policy wise?&nbsp;&nbsp;&nbsp;

sebastiaansmits · Answer

Is Edge part of an App Protection Policy (APP) on the device that limits sharing of data via the setting "Send org data to other apps" for example set to "Policy managed apps". In that case you are unable to connect information from Edge to an app that is outside the APP container. Not sure what the flow is from Edge to the banking app but this seems to be the most likely suspect..

sreekanth_arangathiru · Answer

I just finished my testing,As i setup Edge is my default browser, it is signed with my corporate account. When i try to make a payment through E-commerce site, it brings Edge to invoke the payment page, always you see an option to use banking app, and banking app nothing reacts and says "There are no apps currently configured on this device that your org allows to open this content. Please ensure you are signed with your work or school account to your managed apps or contact Org support"Scenario 2- if i trun off sync on edge browser from my corporate account, the same process works and it asking me whether do i need to use Edge or external browser app for invoking the banking app.

sebastiaansmits · Answer

Can you please confirm if you are using an App Protection Policy (APP)?

Second question: where are you visiting the E-Commerce site, is this from Edge, another browser, or maybe both and behaviour is the same?

For Scenario 2 Edge is a mulit identity app, see here: https://learn.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge : "Edge for iOS and Android is designed to enable users to browse the web and supports multi-identity. " This means that if you log out of your corporate account it works outside of the App Protection Policy container and has free access to all apps. See here: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#multi-identity

sreekanth_arangathiru · Answer

Yes, we do use APP.Since i made edge as a default browser, I visit E-commerce site in Edge, Chrome and Safari does not have issues.Our org want to enable Edge as a default browser for corporate. All the managed apps works fine with edge, no issues. 3rd party apps, ABN or ING or Rabobank apps are not accepting Edge as a default browser, it just blocking to open an app from mobile. It is suggesting to include these apps in the managed apps at the corporate level (which is risky).What solution we are looking for?1. Having Edge as a default browser, we want to set some exceptions when we use 3rd party apps for IOS and Android.

sebastiaansmits · Answer

Sreekanth_Arangathiru&nbsp;&nbsp;Ok that's clear. You can create an exemption in the APP for iOS and Android. Android works with simple package ID but on iOS you need the URL Scheme of the app that can be a little tricky to obtain. Here is a guide that I once followed successfully, not sure if this still works though also for the type of banking apps you try to exempt but give it a try:&nbsp;https://c7solutions.com/2021/04/intune-mam-exemptions-discovering-url-protocols &nbsp;See screenshot for where you can create the exemption in the APP.&nbsp;Here is the Microsoft Doc link:&nbsp;&nbsp;https://learn.microsoft.com/en-gb/mem/intune/apps/app-protection-policies-exception&nbsp;

Forum Discussion

Intune MAM Edge policy

6 Replies

Resources