Edge - Profiles - Conditional Access

Question

Edge Profiles have 2 issues 

1. they don't separate SSO tokens as well as chrome.

     in chrome I use profiles to split my regular id vs my admin id and it works well in 2 different profiles

     in edge, it doesnt matter, it sees both sso profiles and i have to always choose or sign out and back in

2. in separate edge profiles, it doesn't recognize the compliant/registered conditional access status of my device

     our user account can only log in via a compliant device (via conditional access). it works fine with a regular edge wiindow. if I launch a second profile, it doesn't recognize the compliant status of my device and fails login. opened a microsoft ticket for this and the tech told me to use chrome and closed my case. =/

     this also works fine in chrome

Answer 1

Thanks for providing more information in a separate mail. 

Regarding the first issue, not separating SSO tokens as well as Chrome, we are aware of this issue and want to make this experience better. Unfortunately, I don't have a timeframe to share.

For the 2nd issue, separate Edge profiles not recognizing, compliant/registered CA status of your device - this is working as expected. In the screenshots that were sent, the Conditional Access message showed it was from an unregistered device. We want to ensure you are accessing work content in your work profile to ensure that it doesn't corrupt your personal profile. In Edge, to access Conditional Access protected sites, you need to use the profile logged in with your work account. This is different than Chrome and another issue where we recognize a better user experience can be had. We are investigating ways to address this experience. 

This documentation may help: https://docs.microsoft.com/en-us/deployedge/security-overview

Hope this helps,

Colleen

Answer 2

I sent Colleen screenshots and the Microsoft case I had opened in the past. 

I'm not sure if the tech who worked my case filed the bug.

@CEWMolly any other info you need?

Answer 3

Hi George,

I'm seeing similar conditional access issues to what you are reporting involving Edge 85.0.564. I can reproduce it using In-Private mode and would be very interested to hear if you get it resolved.

Regards

Mike

Answer 4

Hi George - I'm from the Edge team and apologies for this experience. We're looking at the information you've supplied regarding profiles and SSO but I'd like to follow-up on your MS ticket that you opened as well. Can you e-mail me at collw @ microsftdotcom. 

Thanks,

Colleen Williams