Forum Discussion

martinfalisse's avatar
martinfalisse
Copper Contributor
Jul 12, 2024

iOS MS Edge URLAllowlist configuration

Hi, I've spent many hours to try a lot of ways to allow only 2 URLs on Intune Managed iPads without success. Here is the working Managed Device App Policy : https://i.imgur.com/J4JkW3B.png (every key work). I want to add 2 websites allowed and every others blocked. I read I could do this with the URLAllowlist configuration key without using the URLBlocklist key. Here is what I try in the configuration value (tried with * and www and does not work) :

 

<array> <string> https://\*.google.com </string> <string> https://\*.yahoo.com </string> <string> edge://\* </string> </array> (saw this in a reddit post)

<array> <string> https://*.google.com </string> <string> https://*.yahoo.com </string </array> (saw this on official MS docs)

https://*.google.com | https://*.yahoo.com

I also try a Managed App Configuration policy instead of a Managed Device one. Here is the configuration (which does not work at all) : https://i.imgur.com/k3Osjty.png I'm running out of ideas on how to do this, even though it seems basic. I didn't think I would have trouble doing this specific config as the auto refresh kiosk mode was not too hard to set up. If someone have a clue I would be very grateful. Sorry for my english as it is not my native language.

Intune
mobile device management (mdm)

2 Replies

  • yangyifei's avatar
    yangyifei
    Icon for Microsoft rankMicrosoft
    Jul 29, 2025

    Alternatively, if you are using Intune MDM or a 3rd party UEM solution, the Chromium policy is indeed the right choice. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-mobile-policies#urlallowlist

    To allow only 2 URLs (say, a.com and b.com), try this:

    <key>URLBlocklist</key>
    <array>
    <string>*</string>
    </array>
    <key>URLAllowlist</key>
    <array>
    <string>https://a.com</string>
    <string>https://b.com</string>
    <string>about://newtab</string>
    </array>

    Please be mindful of unwanted trailing slashes in your configuration, by the way. 

  • yangyifei's avatar
    yangyifei
    Icon for Microsoft rankMicrosoft
    Jul 29, 2025

    Hi, as you are using Intune MAM, and I assume you are using Edge iOS on the managed iPads, the correct way is to use Edge's Intune ACP (App Configuration Policies) to manage URL allow list and/or block list: https://learn.microsoft.com/en-us/intune/intune-service/apps/manage-microsoft-edge#manage-restricted-web-sites.

    Edge also supports chromium policies such as URLBlocklist/URLAllowlist, but it's more suitable to use in a non-Intune environment. 

Resources