Microsoft publishes a set of Edge policies that apply to the Android app and arrive through the standard managed configuration channel, so any MDM can send them to enrolled devices. This page covers the keys fleets use most. Microsoft's mobile policy page lists the full set, and Edge also accepts separate Intune-only app protection keys that are not covered here.
For tablets passed between shifts: no sign-in, no sync, no saved passwords and no history. Cookies and website sessions stay in Edge, so people must sign out of sites themselves.
Key names and value types come from the vendor’s documentation. The explanations are written by Nomid.
Key
Type
What it does
Example
Sites and bookmarks
URLBlocklist
Text: JSON list of URL patterns
Blocks every site that matches a pattern. Use * to block everything except what the allowlist names. On Android, enter the list as one text value in JSON format.
["*"]
URLAllowlist
Text: JSON list of URL patterns
Lists exceptions to the blocklist. If you use a custom new tab page address, add about://newtab here as well. On Android, enter the list as one text value in JSON format.
["intranet.example.com","about://newtab"]
ManagedFavorites
Bookmark list (JSON)
Adds company bookmarks, with optional folders, that people can open but not edit. A toplevel_name entry renames the folder.
Opens a fixed web page instead of Edge's new tab page whenever someone opens a tab.
https://intranet.example.com
Kiosk and locked view
EdgeEnableKioskMode
On or off
Turns Edge into a kiosk app on Android. Off by default.
true
EdgeShowAddressBarInKioskMode
On or off
Shows the address bar while kiosk mode is on. Hidden by default.
false
EdgeShowBottomBarInKioskMode
On or off
Shows the bottom action bar while kiosk mode is on. Hidden by default.
false
EdgeLockedViewModeEnabled
On or off
Makes the address bar read-only and blocks new tabs and several menu actions, so people stay on the page you set.
true
EdgeLockedViewModeAllowedActions
Action name
Lists actions that stay allowed in locked view. The value newtabs lets people open new tabs.
newtabs
Accounts and saved data
EdgeBlockSignInEnabled
On or off
Stops people from signing in to Edge with a personal or work account.
true
EdgeSyncDisabled
On or off
Turns off sync of favorites, passwords and autofill across a person's devices.
true
PasswordManagerEnabled
On or off
Allows or stops Edge from saving passwords. Turn it off on shared devices.
false
EdgeImportPasswordsDisabled
On or off
Stops people from importing passwords into Edge.
true
InPrivateModeAvailability
Choice: 0 available, 1 off, 2 forced
Turns InPrivate tabs off, or forces every tab to be InPrivate.
1
SavingBrowserHistoryDisabled
On or off
Stops Edge from keeping a browsing history on the device.
true
Safety and behavior
SmartScreenEnabled
On or off
Keeps Microsoft Defender SmartScreen checks of sites and downloads on or off.
true
SSLErrorOverrideAllowed
On or off
When false, people cannot click through certificate warning pages.
false
DefaultPopupsSetting
Choice: 1 allow, 2 block
Sets whether sites may open pop-up windows by default.
2
EdgeDefaultHTTPS
On or off
Makes HTTPS the protocol Edge assumes when someone types an address without one.
true
IdleTimeout
Minutes
Sets the minutes without input before the actions in IdleTimeoutActions run. Minimum is 1.
15
TranslateEnabled
On or off
Turns the page translation offer on or off.
false
Deploy with Nomid
Roll Microsoft Edge out in three steps
Step 1Add Microsoft Edge to a policy
Find it on Google Play from the policy’s apps list and choose how it is installed.
Step 2Set its managed configuration
In the policy, set the app’s managed configuration with the keys and values from this page.
Step 3Assign the policy
Devices in the policy receive Microsoft Edge and its configuration on their next sync.
Questions
Microsoft Edge on managed Android
What is Microsoft Edge's package name on Android?
com.microsoft.emmx. Use it to find Edge when you add it to a policy.
Do I need Intune to configure Edge on Android?
No. The keys on this page come from Microsoft's mobile policy page and work through the standard Android managed configuration channel, so any MDM that sends app configuration can set them. Separate Intune app protection keys exist but need Intune.
Are the key names case sensitive?
Yes. Microsoft says app configuration keys are case sensitive, so copy them exactly as written.
Why does my custom new tab page not load?
If you also use a URL allowlist or blocklist, add about://newtab to the allowlist so Edge can open the page you set.