Restrict sign-in to a trusted set of accounts.

Ensure that users always have a work profile on Microsoft Edge.

If you want to manage browser sign-in, you can use the following policies: If the user doesn't get automatically signed into Microsoft Edge, they can manually sign into Microsoft Edge during the first run experience, browser settings, or by opening the identity flyout. But, if the OS default account is MSA, Microsoft Edge will sign in automatically with the MSA account. This scenario is unlikely on enterprise devices.

OS default account is MSA: Win10 RS3 (Version 1709/Build 9) and above.

If you want to automatically sign in users with their Azure AD accounts, consider hybrid joining your devices. If you want to automatically sign in users with domain accounts, use the ConfigureOnPremisesAccountAutoSignIn policy. The device is domain joined: Available on Win10, down-level Windows, and corresponding server versions.īy default, the user won't get automatically signed in.The user gets automatically signed in with their Azure AD account. The device is hybrid/AAD-J: Available on Win10, down-level Windows, and corresponding server versions.Depending on how a device is configured, users can get auto signed into Microsoft Edge using one of the following approaches. Microsoft Edge uses the OS default account to auto sign into the browser. How users can sign into Microsoft Edge Automatic sign-in The following table summarizes the feature support for each type of account. The type of account used for sign-in determines which authenticated features are available for the user in Microsoft Edge. Microsoft Edge supports signing into a browser profile with an Azure AD, MSA, or a domain account. Browser sign-in and authenticated features

This applies to Microsoft Edge version 77 or later.

Microsoft edge chromium