Can't get Universal Links to work from a protected Edge Browser within a Microsoft Intune deployment with conditional access.

Question

question

deblois asked Feb 11, '22 deblois commented Feb 28, '22

Can't get Universal Links to work from a protected Edge Browser within a Microsoft Intune deployment with conditional access.

Hello, we’re having issues getting Universal Links to open an unmanaged app (say APP-A) from a managed Edge Browser (iOS and Android). When testing outside of the Intune environment, everything works as expected and APP-A can be opened from Edge. However, within the Intune environment, the user stays within Edge and APP-A is never opened.

We’ve read documentation about Data Transfer Policy and App Protection Policy however, we’re still having issues and are still a bit unclear in what settings/exemptions needs to be set for what app.

What exemptions do we need to set for what app? Are there exemptions we need to set with Edge or would it all be within APP-A’s policies? Is the Data Transfer Policy Exemption required for Universal Links to function properly?

Thank you

mem-intune-general mem-intune-application-management mem-intune-conditional-access

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-02-11T15:28:47.853Z

RahulJindal-2267 answered Feb 11, '22 deblois commented Feb 28, '22

What is the error?

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

deblois · Feb 28 at 08:30 PM

Hi Rahul, unfortunately there are no errors. The issue is that the expected behavior is for the user to get directed to APP-A from Edge, however the actual result is that the user stays within Edge and is never redirected to APP-A which results in a sub optimal user experience.

0 ·

Answer 2 · 2022-02-14T02:20:06.827Z

Crystal-MSFT answered Feb 14, '22 deblois commented Feb 28, '22

@deblois, For our situation, firstly we can see if the universal link target app is in the Microsoft Intune protected apps list and can apply app protection policy.
https://docs.microsoft.com/en-us/mem/intune/apps/apps-supported-intune-apps

If yes, we can add Universal Links to managed apps
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#managed-universal-links

If no, we can try to add the universal links into "Select universal links to exempt". But it may result in data security leaks. Here is a link for the reference:
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#exempt-universal-links

Hope it can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT · Feb 16 at 03:17 AM

@deblois, Hope thing are going well! I am writing to see if we have tried the suggestions. If there's any update, feel free to let us know.

Thanks and have a nice day!

0 ·

deblois Crystal-MSFT · Feb 28 at 08:27 PM

Thanks Crystal, we will try these suggestions and give an update.

0 ·

question