Windows 11 Kiosk Mode Edge (to open Dynamics 365)

Question

We have users who are normally registered in MS Entra and work on their laptops. The laptops are installed/set up via Endpoint Manager.

Now there will be additional tablets in the future, where some of these users will also have to log in on these tablets (multiple Users on the same Tablet). Die Tablets will also be registered in Endpoint Manager. Windows 11 is installed on the tablets and the users only need Edge there. All the necessary tools can be accessed via Edge (e.g. Microsoft Dynamics 365)

For security reasons, we are now toying with the idea of using Windows 11 Kiosk Mode on these tablets and allowing users to access the ERP via Edge.

However, I have now read that the kiosk for multi-APP does not work if MFA is activated. We do not need multi-app but only Edge. However, the users must still be able to log in to the ERP (Microsoft Dynamics 365) via MFA. Does the solution with kiosk mode generally no longer work if MFA is activated on the users?

Has anyone had any experience with this?

Answer 1

@Lhetos Thanks for posting in our Q&A.

Yes. MFA is currently not supported in multi-app kiosk mode scenarios.

https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-configuration/users-cannot-logon-windows-multi-app-kiosk

So, it is suggested to use single-app kiosk mode. Configure your devices to use single-app kiosk mode with Microsoft Edge. This setup is simpler and seems less likely to conflict with MFA requirements.

https://learn.microsoft.com/en-us/mem/intune-service/configuration/kiosk-settings-windows#single-app-full-screen-kiosk

Then review and adjust your conditional access policies to ensure that they allow MFA for logging into Microsoft Dynamics 365 ERP while using Edge in kiosk mode.

Before rolling out the configuration widely, test it with a few users to ensure that they can log in to Microsoft Dynamics 365 ERP via MFA without issues.

Hope it will help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.