Forum Discussion
Early preview of Microsoft Edge group policies
- Jul 11, 2019
Ruud van Velsen The policy wasn't ready when Sean shared the administrative template zip file. It will be in the next version we share.
Jussi Palo We don't currently have a way to configure this setting using policy. Just wondering, since Windows hello lets users enter their pin or biometric identity instead of a password, why do you see the need to have copy/paste supported. Furthermore, if the user is signed into the browser profile (happens automatically), they'll benefit from ambient authentication and won't even need to see this dialog.
- Jussi PaloJan 30, 2020Iron Contributor
There are different customer/corporate systems requiring using credentials other than your personal ones you've used when logging into Windows, e.g., internal Microsoft SharePoint on-prem systems commonly using Windows authentication. That combined with dev/test/prod instances of said systems, and you suddenly have 30 different credentials you need to use - not feasible nor even possible to use browser profiles or anything else except copy pasting from browser password extension.
- Keith DavisJan 16, 2020Iron Contributor
That does not work for users that have their own MS profile, which is not tied to our domain (we don't allow that).
- Avi VaidJan 16, 2020Iron Contributor
Keith Davis Thanks, that makes sense.
Two things that we're working on here:
1. We're working on a feature that will help users get back to their work profile from their personal MS profile when accessing these work sites.
2. We are considering revamping this HTTPAuth experience to avoid prompting users for creds. We will simply ask if we should release creds from the OS to auth users to the site. If the user then says yes, we will use ambient authentication to auth them to the website. Would love to hear your thoughts on this.
With these features coming, do you think you would still need the policy to use the username password field instead of windows hello?
- Keith DavisJan 24, 2020Iron Contributor
BTW, even with the work profile Edge automatically created, we still get the prompt when working over a remote connection. FYI, that runs over SSL on a non-standard port for us, if that makes a difference.