topic Re: VPN SAML Browser Authentication fails after latest Edge / Chrome updates in SASE and Remote Access

VPN SAML Browser Authentication fails after latest Edge / Chrome updates

Ruan_Kotze — Tue, 09 Dec 2025 09:58:08 GMT

I have not seen any posts on this, so just a heads up.

If users update to the latest Edge / Chrome / Chromium build they will receive a pop-up asking them to Allow access from your VPN url to the local network. Failing to do so will cause SAML authentication to fail.

Microsoft References:

Microsoft Edge release notes for Stable Channel | Microsoft Learn
Control a website’s access to the local network in Microsoft Edge - Microsoft Support
Microsoft Edge Browser Policy Documentation LocalNetworkAccessAllowedForUrls | Microsoft Learn

Edit:
As per links above you can add the sites to the allow list via either GPO or Intune Settings Catalog for Edge.

-Ruan

Re: VPN SAML Browser Authentication fails after latest Edge / Chrome updates

bsc — Tue, 09 Dec 2025 10:04:05 GMT

You can deploy that via GPO

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-browser-policies/localnetworkaccessallowedforurls

We're still working on the fix, I can update details, later.

Workaround: Egde settings => website permissions => all permissions => local network access => add website

something like that, in german, its Datenschutz, Suche und Dienste/Websiteberechtigungen/Alle Berechtigungen/Lokaler Netzwerkzugriff )

#########edit - This is, what we did:

1. Quickfix on all computers that are not reachable by GPO: Go to Edge:

edge://settings/privacy/sitePermissions/allPermissions/localNetworkAccess

and add your SAML-URL to allowed websites

(there may be way to do that smarter by reg or powershell, we just sent out a onepager with a screenshot)

2. (update MS-Edge ADMX templates from https://www.microsoft.com/de-de/edge/business/download and)

configure your MS-Edge-GPO with your SAML URL:

Administrative Templates/Microsoft Edge/Network settings/LocalNetworkAccessAllowedForUrls

to catch all computers, that are not working remotely.

Re: VPN SAML Browser Authentication fails after latest Edge / Chrome updates

Ruan_Kotze — Tue, 09 Dec 2025 09:59:38 GMT

Correct - the GPO and Intune settings to resolve are in the links I posted. We are pushing the setting using the Intune Settings Catalog for Edge.

Re: VPN SAML Browser Authentication fails after latest Edge / Chrome updates

Vanness_Chen — Wed, 17 Dec 2025 03:24:54 GMT

My customer and I have also recently encountered this permission prompt. The customer is confused about why the prompt still appears even though a public certificate has already been imported into the Remote Access Web Portal via SmartConsole. Could this be a firewall-related issue?

Re: VPN SAML Browser Authentication fails after latest Edge / Chrome updates

PhoneBoy — Wed, 17 Dec 2025 15:57:26 GMT

This is a security feature of the underlying web browser and has nothing to do with certificates.
MacOS also prompts me with a similar message periodically for various apps (including Chrome).