Skip to main content

Restrict Web Content Transfer with Other Apps

Implementation Effort: Low

User Impact: Medium

Overview​

This APP control determines which browser can open web content launched from a managed app. In many Zero Trust mobile designs, the goal is to keep corporate links inside a policy-managed browser such as Microsoft Edge so that authentication, session handling, and data transfer controls remain inside the managed path.

If links open in any installed browser, the organization loses consistency and may allow corporate content into unmanaged browsing sessions. That makes this control an important companion to the broader APP data transfer settings.

Implementation Guidance​

  1. In the applicable Android and iOS/iPadOS app protection policies, review the Restrict web content transfer with other apps setting.
  2. Use the managed-browser option, for example Microsoft Edge where documented, when the organization wants web content from managed apps to stay inside the protected app ecosystem. Avoid Any app unless the business has accepted the broader exposure.
  3. Coordinate this setting with app configuration for Microsoft Edge, Conditional Access rules for mobile browser access, and the Send org data to other apps setting so the user experience is predictable.
  4. Test common user flows from Outlook, Teams, OneDrive, and Office mobile apps: opening SharePoint links, opening document links, single sign-on behavior, and copy and paste restrictions inside the managed browser.

Reference​