Can't get Universal Links to work from a protected Edge Browser within a Microsoft Intune deployment with conditional access.

Question

Hello, we’re having issues getting Universal Links to open an unmanaged app (say APP-A) from a managed Edge Browser (iOS and Android). When testing outside of the Intune environment, everything works as expected and APP-A can be opened from Edge. However, within the Intune environment, the user stays within Edge and APP-A is never opened.

We’ve read documentation about Data Transfer Policy and App Protection Policy however, we’re still having issues and are still a bit unclear in what settings/exemptions needs to be set for what app.

What exemptions do we need to set for what app? Are there exemptions we need to set with Edge or would it all be within APP-A’s policies? Is the Data Transfer Policy Exemption required for Universal Links to function properly?

Thank you

Answer 1

@de Blois , For our situation, firstly we can see if the universal link target app is in the Microsoft Intune protected apps list and can apply app protection policy.
https://learn.microsoft.com/en-us/mem/intune/apps/apps-supported-intune-apps

If yes, we can add Universal Links to managed apps
https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#managed-universal-links

If no, we can try to add the universal links into "Select universal links to exempt". But it may result in data security leaks. Here is a link for the reference:
https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#exempt-universal-links

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

What is the error?