Edge - force to prompt crendtials on intranet and trusted sites

Question

So, we have thousands of workstations that use a generic user and are always logged in, more like kiosk workstations. These workstations are setup to always stay on, so users could go to any workstation, launch a browser and use it and walk away.
When we used IE 11 for Office.com, we were able to add the site office.com/login.microsoftonline.com to trusted sites zone and set the trusted sites to force the prompt for credentials instead of auto login. And worked great for us until we switched to Edge.

Chromium Edge is not honoring any of these settings and auto logs in to the website office.com using the generic user logged into the PC instead of asking the user to enter for credentials.
There is nothing i could find online as a solution for this.

Any thoughts?

Any help from a Microsoft Pro here?

Answer 1

Hi @Vamshi Krishna Siram ,

Could this point you to the right direction?

https://learn.microsoft.com/fi-fi/deployedge/microsoft-edge-security-identity

Answer 2

@Vamshi Krishna Siram ,

Are you using Azure Active Directory Seamless Single Sign-On or Pass-through authentication or Federation?

If you are using Azure Active Directory (Azure AD) Seamless Single Sign-On (Seamless SSO), check the following links.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start#why-do-you-need-to-modify-users-intranet-zone-settings

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start#microsoft-edge-based-on-chromium-macos-and-other-non-windows-platforms

Answer 3

@Vamshi Krishna Siram ,

Do we need to add both login.microsoftonline.com and autologon.microsoftazuread.com to the restricted site zone to force the user to enter credentials?

You can test that if you want to.

I think the best method is to use shortcuts on kiosk type workstations that start Edge in Private Mode.

Make Microsoft Edge Always Start in InPrivate Mode