Can't get Universal Links to work from a protected Edge Browser within a Microsoft Intune deployment with conditional access.

de Blois 11 Reputation points
2022-02-11T14:10:57.347+00:00

Hello, we’re having issues getting Universal Links to open an unmanaged app (say APP-A) from a managed Edge Browser (iOS and Android). When testing outside of the Intune environment, everything works as expected and APP-A can be opened from Edge. However, within the Intune environment, the user stays within Edge and APP-A is never opened.

We’ve read documentation about Data Transfer Policy and App Protection Policy however, we’re still having issues and are still a bit unclear in what settings/exemptions needs to be set for what app.

What exemptions do we need to set for what app? Are there exemptions we need to set with Edge or would it all be within APP-A’s policies? Is the Data Transfer Policy Exemption required for Universal Links to function properly?

Thank you

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
883 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,412 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,241 Reputation points MVP
    2022-02-11T15:28:47.853+00:00

    What is the error?

  2. Crystal-MSFT 43,721 Reputation points Microsoft Vendor
    2022-02-14T02:20:06.827+00:00

    @de Blois , For our situation, firstly we can see if the universal link target app is in the Microsoft Intune protected apps list and can apply app protection policy.
    https://learn.microsoft.com/en-us/mem/intune/apps/apps-supported-intune-apps

    If yes, we can add Universal Links to managed apps
    https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#managed-universal-links

    If no, we can try to add the universal links into "Select universal links to exempt". But it may result in data security leaks. Here is a link for the reference:
    https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-ios#exempt-universal-links

    Hope it can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.