メインコンテンツへスキップ

069: Webapp Deployment

Implementation Effort: Low

User Impact: Low

Overview​

A web app in Microsoft Intune is typically a managed shortcut that directs users to a browser-based application. This can be useful for internal portals, SaaS apps, or line-of-business web tools that do not require native packaging. In a Zero Trust design, the key question is not just how to publish the shortcut, but how the underlying web access will be protected through browser choice, Conditional Access, session controls, and device or app trust.

A web app shortcut is simple to deploy, but it does not by itself secure the application behind it.

Implementation Guidance​

  1. Confirm whether the web application should open in the platform default browser, a managed browser such as Microsoft Edge, or another approved experience.
  2. Add the web app in Intune with a clear display name, icon, and URL, then target a pilot group first.
  3. Pair the shortcut with the right access controls: compliant-device Conditional Access, app-protection-aware browser access, or other session controls for the application itself.
  4. Validate the full user journey, including sign-in prompts, deep linking from Outlook or Teams, and whether the web app behaves correctly on small mobile screens.
  5. If the URL changes often, document the operational owner and update process so stale shortcuts do not remain assigned.
  6. Use web apps for lightweight access scenarios; prefer native or managed Microsoft apps when they provide stronger policy integration.

Reference​