Microsoft Edge

On iOS & iPadOS 

• Import Microsoft Edge  to the App Portal
• Assign your selected application to a Tag
• Click the Edit button for Managed Config
• Review the configuration keys given by Microsoft
• Review Silverback system variables 
• Paste your configuration into to the App Configuration XML area
  • Configure the following to Allow only configured organization accounts in apps

<key>IntuneMAMAllowedAccountsOnly</key>
<string>Enabled</string>
<key>IntuneMAMUPN</key>
<string>{UserName}</string>

• Save the configuration
• Assign the tag to a test device or Push the tag to your already assigned devices
• Install the application 
• Try to login with your corporate account
• Try to login or add an additional account, that is not reflecting the {UserName} variable

On Android Enterprise

• Import Microsoft Edge to the App Portal as Managed Play application
• Assign your selected application to a Tag
• Click the Edit button for Managed Config
• Press Edit managed configuration
• Review the configuration keys given by Microsoft
• Review Silverback system variables
• The following configuration represents an individual working setup 
  • Add as Allow Account e.g.  {UserName}

• Press Save
• Assign the tag to a test device or Push the tag to your already assigned devices
• Open Companion, navigate to Profiles and check if a Managed Configuration for Microsoft Edge is present 
• Install the application from Managed Google Play
• Try to login with your corporate account
• Try to login or add an additional account, that is not reflecting the {UserName} variable

App Protection Policies for iOS and Android

Several Microsoft 365 and partner applications are supporting additional app protections policies to ensure your organization's data remains safe or contained in managed apps. Please refer to Azure AD Integration VI: App Protection Policies for the integration on Android and iOS/iPadOS applications. 

On Windows 10/11 

As Microsoft Edge is the default browser on Windows 10/11 devices, the browser is typically installed by default on the operating system level. As a result, Microsoft Edge can be directly configured with a Silverback Profile inside the Management Console.

• Create a new Tag, provide a Name and enable Profile and Windows and press save
• Navigate to Profile and Select Microsoft Edge
• Enable Microsoft Edge Settings
• Review all available Microsoft Edge configuration options 
• Configure Microsoft Edge available options

• Press Save
• Assign the tag to a test device or Push the tag to your already assigned devices
• After assigning the Tag, enforce a device check-in by clicking the refresh button on the Device Information
• On your Windows 10/11 locate and review the installed MDM profile
  • e.g. under Settings > Accounts > Access to Work or School 
  • Click on the Profile and press Info
  • Scroll down to additionally sync the device. It is just for speed up the process
  • Click Back and open again the Info page
  • Under policies you should see now several entries with Edge~Policy~ 
• Open Microsoft Edge and enter the following into the address bar: edge://policy/ 
• Review configured settings for your Microsoft Edge

On macOS

For macOS devices, the application for Microsoft Edge is handled and installed as an Enterprise application. For this you need first to download the sources from the official download from Microsoft. Then you will need to generate a property list (*.plist) for Microsoft Edge with the provided MDMPackager tool on a macOS device. After uploading the application, you can create your custom configuration XML with your individual settings from the official configuration key documentation from Microsoft and distribute the pre-configured Microsoft Edge application to your managed devices..

<dict>
<key>HideFirstRunExperience</key>
<true/>
<key>InPrivateModeAvailability</key>
<integer>1</integer>
<key>PasswordManagerEnabled</key>
<false/>
<key>PasswordRevealEnabled</key>
<false/>
<key>SmartScreenEnabled</key>
<false/>
<key>RestoreOnStartup</key>
<integer>4</integer>
<key>RestoreOnStartupURLs</key>
<array>
  <string>https://imagoverum.com</string>
  <string>https://www.matrix42.com</string>
</array>
</dict>