Browser sign-in settings

Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign-on (SSO). To control the availability of sync, use the 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy instead.

If you set this policy to 'Disable', make sure that you also set the 'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account) policy to disabled because 'NonRemovableProfileEnabled' disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge uses the 'Disable browser sign-in' policy and behaves as if 'NonRemovableProfileEnabled' is set to disabled.

If you set this policy to 'Enable', users can sign in to the browser. Signing in to the browser doesn't mean that sync is turned on by default; the user must separately opt in to use this feature.

If you set this policy to 'Force', users must sign in to a profile to use the browser. By default, this allows the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the 'SyncDisabled' policy. The default value of 'BrowserGuestModeEnabled' (Enable guest mode) policy is set to false.

If you don't configure this policy, users can decide if they want to enable the browser sign-in option and use it as they see fit.

Policy options mapping:

* Disable (0) = Disable browser sign-in

* Enable (1) = Enable browser sign-in

* Force (2) = Force users to sign-in to use the browser (all profiles)

Use the preceding information when configuring this policy.