Dear reader,
We have a intranet application in production for submitting printed material to our printshops which uses on premises AD authentication. (https://www.canon-europe.com/software/prismadirect/)
So a user who works on a on premises joined workstation or VMware based virtual desktop and wants to use the intranet application does not need a 2nd logon for it. It works well with Edge stable.
Users on AAD joined intune laptops (large numbers in the current situation) using Edge stable (and Dev and Beta for that matter) are prompted with a Windows security dialog box like below:
This behaviour is to be expected, and not, at the same time.
It is because of the domain is different, and thus security is different, and for example some users logon to their intune laptops using a pin instead username / password.
It is not because Edge (or Windows) always prompts with a pin, even if the user is logged on with username / password.
It presents the user with a cryptic puzzle: a pin does not work on the intranet site, and getting there is awkward. The user must click "Meer keuzes" (more choices) and then "Use other account" which then presents the dialog for "e-mail address / password", which can be used.
Chrome does not have this issue, using different authentication etc.
My question is: how do we configure Windows / Edge to use the "e-mail address / password" choice for this intranet app or better be more intelligent with it???
Anyone?
Regards,
Henno
Hi @Henno_Keers,
Thanks for your inquiry. When Edge is prompting the dialog you have screen-captured below, Edge is trying to use the H4B (Windows Hello for Business pin) as the security mechanism to authorize Windows to release the primary account connected to Windows to the web resource. So, in this case with your AAD Intune users, Edge is allowing the user to share the AAD from the computer to PRISMAdirect.
How does this fit with your expectations? On these AAD Intune computers, when the users are clicking "More choices" and then entering a username and password, what account are they entering? An on-prem AD account or their AAD?
Happy to help here 
Palmer