Branding and customizing Edge: AI Browser with Intune in iOS and Android
I could not find any good source that really described what the different settings in Edge mobile really resulted in. So why not do a deep dive on branding and customization with screenshots of the results. Adding branding and configuration to Microsoft Edge: AI Browser on iOS can be beneficial for several reasons:
- Consistency: Ensuring that the browser aligns with your organization’s branding helps maintain a consistent look and feel across all platforms and devices. This can enhance brand recognition and trust among users.
- Customization: Configuring Edge allows you to tailor the browser’s settings and features to better meet the needs of your users. This can include setting default homepages, bookmarks, and security settings, which can improve user experience and productivity.
- Security: By configuring security settings, you can ensure that the browser adheres to your organization’s security policies. This can help protect sensitive information and reduce the risk of security breaches.
- Control: Branding and configuration give you greater control over how the browser is used within your organization. This can help enforce compliance with company policies and ensure that users have access to the tools and resources they need.
- Support: A branded and configured browser can make it easier for IT support teams to manage and troubleshoot issues, as they can ensure that all users are working with the same settings and configurations.
How to add branding to Microsoft Edge: AI Browser
Deploy Edge
To be able to add branding and configure Edge, you also need to deploy Edge to your iOS and Android devices
- Access the Intune Admin Center:
Start by logging into the Microsoft Intune admin center. Navigate to Apps > All Apps - Click + Add and select Managed Google Play app and click Select
- Search for and find Microsoft Edge: AI Browser and click Select
Now it can look like nothing happens, but it does. - Click Sync and go back to Apps > All Apps
After a while, the app will appear in the app list.
- Assign the app to your target users or devices
- Navigate to Apps > All Apps
- Click + Add and select iOS store app and click Select
- Click Search the App Store
- Search for and find Microsoft Edge: AI Browser and click Select
- Click Next on the App Information dialog
- Add appropriate scope tags and click Next on the Scope Tags dialog
- Assign the app to your target users or devices
Note: You do not need to assign the app, But you need to add it to be able to do customizations
Branding in Intune
The make sure you have added branding to Intune. The logos, colors and background will be used when branding Edge.
- Access the Intune Admin Center:
Start by logging into the Microsoft Intune admin center. Navigate to Tenant Administration > User Experience > Customization
- Access the Intune Admin Center:
Start by logging into the Microsoft Intune admin center. Navigate to Apps > App configuration policies - Click + Create and select Managed Device
- Give the App configuration a suitable name and description
- Select Microsoft Edge: AI Browser as a Targeted app and select Next
- On Configuration settings format, select Configuration Designer and start customizing!
Note that Android has a list of configurable settings while iOS need the complete configuration key name on each property
App management and sign on
First we have some basic settings needed to get the config applied to all managed devices. If not included, Edge can remain unmanaged and will not force the user to sign in. These settings is currently rolling out as a default settings in most apps. But does not exist in Edge for iOS at the moment.
iOS needs these keys:
| Configuration Key name | Settings | Effect |
| IntuneMAMUPN | {{userprincipalname}} | UserPrincipalName will be used in the app to sign in and obtain the configuration policies. |
| IntuneMAMOID | {{userid}} | UserID will be utilized to ensure that the app protection policy is enforced, even if the UPN changes. |
| IntuneMAMAllowedAccountsOnly | enabled: The only account allowed is the account in IntuneMAMUPN disabled: Any account is allowed. | If you want to restrict and only allow your corporate account in the app |
Android does not need the UPN and OID setting and gets managed by default. The only setting left is:
| Configuration Key | Settings | Effect |
| Intune Allowed Accounts com.microsoft.intune.mam.AllowedAccountUPNs | {{userprincipalname}} | If you only allow your corporate account in the app |
New Page layout
Next thing you can change is some visuals and branding settings. You can control the settings available in the app for a new page, same setting for iOS and Android
iOS
| Configuration Key | Settings | Effect |
| com.microsoft.intune.mam.managedbrowser.NewTabPageLayout | focused Focused is selected inspirational (Default) Inspirational is selected informational Informational is selected custom Custom is selected | The New Page Layout will be one of the selected layouts |
Android
| Configuration Key | Settings | Effect |
| EdgeNewTabPageLayout | focused Focused is selected inspirational (Default) Inspirational is selected informational Informational is selected custom Custom is selected | The New Page Layout will be one of the selected layouts Heads up! Android is case sensitive! only small letters. |
New Page restrictions
To make sure all users have the same experience, you can restrict the “New Page” experience by setting the above to custom and set:
iOS
| Configuration Key | Settings | Effect |
| com.microsoft.intune.mam.managedbrowser.NewTabPageLayout.Custom | topsites Turn on top site shortcuts wallpaper Turn on wallpaper newsfeed Turn on news feed | topsites|wallpaper = The layout will have Top sites and Wallpaper topsites = The layout will only have Top sites This requires Custom in NewTabPageLayout |
| com.microsoft.intune.mam.managedbrowser.NewTabPageLayout.UserSelectable | true User can change the layout false User cannot change the layout | Change if the layout can be changed or not |
Android
| Configuration Key | Settings | Effect |
| EdgeNewTabPageLayoutCustom | topsites Turn on top site shortcuts wallpaper Turn on wallpaper newsfeed Turn on news feed | topsites|wallpaper = The layout will have Top sites and Wallpaper topsites = The layout will only have Top sites This requires Custom in NewTabPageLayout |
| EdgeNewTabPageLayoutUserSelectable | true User can change the layout false User cannot change the layout | Change if the layout can be changed or not |
I will keep mine clean with users blocked from changing custom with topsites
Branding
Next we can add the company logo and color
iOS
| Configuration Key | Settings | Effect |
| com.microsoft.intune.mam.managedbrowser.NewTabPage.BrandLogo EdgeBrandLogo | true shows organization’s brand logo false (default) won’t expose a logo | This logo is collected from Entra branding More specifically the Sign-in form – Banner Logo |
| com.microsoft.intune.mam.managedbrowser.NewTabPage.BrandColor EdgeBrandColor | true shows organization’s brand color false (default) won’t expose a color | The color is collected from Entra branding Page background color will be used as brand color |
Note that the logo is quite small. But nothing we can do about it.
Homepage and links
iOS
| Configuration Key | Settings | Effect |
| com.microsoft.intune.mam.managedbrowser.homepage | Specify a valid URL to users homepage to add a homepage link https://www.tbone.se | This homepage will not be “start page” It will appear as a first icon beneath the search bar when the user opens a new tab |
| com.microsoft.intune.mam.managedbrowser.managedTopSites | Specify set of links with name and URL separated with “|” and a double “||” between each Coligo|https://coligo.se||Microsoft|https://microsoft.com | This will appear as links after the first Homepage link |
| com.microsoft.intune.mam.managedbrowser.NewTabPage.CustomURL | Specify a valid URL to users homepage that will replace new page https://tbone.se | This will replace the new page |
| com.microsoft.intune.mam.managedbrowser.bookmarks | Specify set of links with name and URL separated with “|” and a double “||” between each Coligo|https://coligo.se||Microsoft|https://microsoft.com |
Homepage, topsites and custom URL for new page:
Favorites is kind of hard to find for end users:
Android
Android is a bit tricky, we need to enter the favorites as a JSON string:
| Configuration Key | Settings |
| com.microsoft.intune.mam.managedbrowser.homepage | Cannot be controlled (You should be able to add it with JSON, but after saving all custom settings are gone for me. I couldn´t find out how) |
| com.microsoft.intune.mam.managedbrowser.managedTopSites | Cannot be controlled (You should be able to add it with JSON, but after saving all custom settings are gone for me. I couldn´t find out how) |
| EdgeNewTabPageCustomURL | Specify a valid URL to users homepage to add a homepage link https://www.tbone.se |
| ManagedFavorites | [{“toplevel_name”: “T-Bone Favorites”}, {“url”: “https://www.google.com”, “name”: “Google”},{“url”: “https://m365.cloud.microsoft”, “name”: “M365”}] |
You add the JSON as a string in configuration designer:
Same poor user experience for favorites on Android:
There are plenty of more settings available to customize, but these are the most common ones when it comes to branding.
Have a look at these resources for all keys:
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-mobile-policies
https://learn.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge
Additional Tips
One important thing to remember is to be case sensitive! Android can be really sensitive to this.
If the policy doesn´t seem to apply, check spelling, case and syntax on all configurations. If one is wrong, they can all fail.
I would wish that edge://policy would work. But it always display Error and claims Unknown policy when it comes to Intune app config on mobile device:
About The Author
