This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 85%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDK%3C/text%3E%3C/svg%3E)
Hello,
We are facing an issue with some apps which are using SSO. Due to WebView they are using Chrome to proceed with authentication.
In parallel, we have a Conditional access which allows access to Cloud apps only from Approved apps. On my case, Edge. The result is the process to fail because Chrome is not under the MS approved apps. My next thought was to push a configuration policy and app protection policy to chrome so I can update the CA with Approved Apps or App protected apps.
Configuration policy is applied, but protection policy not. Do you have any idea how to apply protection on chrome? Is it allowed?
Regards
Dimitris
Have you tried adding a custom app in APP? com.android.chrome for Android and com.google.chrome.ios for iOS.
Hello @Rahul Jindal , Yes I have already tested it. This works for App Configuration Policy.However for App Protection Policy it doesn't seem to be appplied.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 16%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJA%3C/text%3E%3C/svg%3E)
I am facing this same issue, have you found a solution maybe?
Hello, Following some adjustments on app protection policy, I managed did it work for Android but not for ios devices. Thus what we did was to exclude the app on conditional access policy for protected app and leave as it is fro MFA, Compliant Device, Session management
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@Dimitrios Koliopanos, Thanks for letting us know the status. I notice you have followed some adjustments and exclude the app on conditional access policy and now it works. Thanks for sharing here. if there's anything we can help in the future, feel free to post in Q&A to discuss together.
Thanks for your time and have a nice day!
@Dimitrios Koliopanos, Thanks for posting in Q&A.
In General, any app that has been integrated with the Intune SDK or wrapped by the Intune App Wrapping Tool can be managed using Intune app protection policies. Microsoft Intune protected apps that have been built using these tools are available for public use.
Here is a link list all the Microsoft Intune protected apps:
https://learn.microsoft.com/en-us/mem/intune/apps/apps-supported-intune-apps
For Google chrome, it is not in the Microsoft Intune protected apps list. So I am afraid it can't apply the app protection policy.
Thanks for your understanding.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Ηello @Crystal-MSFT , Yes I am aware aboutbthe info shared but wanted someone to confirm it about Chrome. Thank you for your prompt reply.
@Dimitrios Koliopanos, Thanks for the reply. I am glad that the information can help. If there's anything else we can help in the future, feel free to post in our Q&A to discuss together.
Thanks for your time and have a nice day!