Forum Discussion
Intune MAM Edge policy
Dear Community, We have Edge as a default browser to control and manage apps, documents and corporate stuff for IOs and Android, it works well. But, we have a situation like when user's using ...
I just finished my testing,
As i setup Edge is my default browser, it is signed with my corporate account. When i try to make a payment through E-commerce site, it brings Edge to invoke the payment page, always you see an option to use banking app, and banking app nothing reacts and says "There are no apps currently configured on this device that your org allows to open this content. Please ensure you are signed with your work or school account to your managed apps or contact Org support"
Scenario 2- if i trun off sync on edge browser from my corporate account, the same process works and it asking me whether do i need to use Edge or external browser app for invoking the banking app.
As i setup Edge is my default browser, it is signed with my corporate account. When i try to make a payment through E-commerce site, it brings Edge to invoke the payment page, always you see an option to use banking app, and banking app nothing reacts and says "There are no apps currently configured on this device that your org allows to open this content. Please ensure you are signed with your work or school account to your managed apps or contact Org support"
Scenario 2- if i trun off sync on edge browser from my corporate account, the same process works and it asking me whether do i need to use Edge or external browser app for invoking the banking app.
Can you please confirm if you are using an App Protection Policy (APP)?
Second question: where are you visiting the E-Commerce site, is this from Edge, another browser, or maybe both and behaviour is the same?
For Scenario 2 Edge is a mulit identity app, see here: https://learn.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge : "Edge for iOS and Android is designed to enable users to browse the web and supports multi-identity. " This means that if you log out of your corporate account it works outside of the App Protection Policy container and has free access to all apps. See here: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#multi-identity
Second question: where are you visiting the E-Commerce site, is this from Edge, another browser, or maybe both and behaviour is the same?
For Scenario 2 Edge is a mulit identity app, see here: https://learn.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge : "Edge for iOS and Android is designed to enable users to browse the web and supports multi-identity. " This means that if you log out of your corporate account it works outside of the App Protection Policy container and has free access to all apps. See here: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#multi-identity
- Yes, we do use APP.
Since i made edge as a default browser, I visit E-commerce site in Edge, Chrome and Safari does not have issues.
Our org want to enable Edge as a default browser for corporate. All the managed apps works fine with edge, no issues. 3rd party apps, ABN or ING or Rabobank apps are not accepting Edge as a default browser, it just blocking to open an app from mobile. It is suggesting to include these apps in the managed apps at the corporate level (which is risky).
What solution we are looking for?
1. Having Edge as a default browser, we want to set some exceptions when we use 3rd party apps for IOS and Android.Ok that's clear. You can create an exemption in the APP for iOS and Android. Android works with simple package ID but on iOS you need the URL Scheme of the app that can be a little tricky to obtain. Here is a guide that I once followed successfully, not sure if this still works though also for the type of banking apps you try to exempt but give it a try: https://c7solutions.com/2021/04/intune-mam-exemptions-discovering-url-protocols
See screenshot for where you can create the exemption in the APP.
Here is the Microsoft Doc link:
https://learn.microsoft.com/en-gb/mem/intune/apps/app-protection-policies-exception
- Thank you for lights! but this has a risk and extended efforts to apply across environment. Considering the global presence, it is not logically apply such exemptions for the required apps.
Not advisable respecting the security.
Exhausted of my brain storming, lets see if MS could help
