Update in-browser-protection.md

Author: AmitMishaeli

CloudAppSecurityDocs/in-browser-protection.md

@@ -82,6 +82,31 @@ For example, if you have an Endpoint DLP policy that blocks a file upload to Sal
 
 For more information, see [Learn about data loss prevention](/purview/dlp-learn-about-dlp).
 
+## Enforce Edge in-browser when accessing business apps
+Administrators who understand the power of Edge in-browser protection, can require their users to use Edge when accessing corporate resources. 
+A primary reason is security, since the barrier to circumventing session controls using Edge is much higher than with reverse proxy technology.
+
+Admin experience   
+The feature is controlled through the following settings:   
+M365 Defender > Settings > Cloud Apps > Edge for Business protection > Enforce usage of Edge for business   
+
+The following options are available:   
+- Do not enforce (default)   
+- Allow access only from Edge   
+- Enforce access from Edge when possible
+
+Admins have the option to apply policies on all devices or only on unmanaged devices.
+
+**Allow access only from Edge** means that access to the business application, scoped to session policies, can only be obtained via the Edge browser.
+
+**Enforce access from Edge when possible** means that users should use Edge to access the application if their context permits, but if not, they may use a different browser to access the protected application.
+
+For example: 
+If a user is subject to a policy that does not align with in-browser protection capabilities (such as, 'Protect file upon download'), OR 
+the Operating System is incompatible (for instance, Android). 
+In that scenario, because the user lacks control over the context, they may opt to use a different browser. 
+If the policies applicable to him allow it and the operating system is compatible (Windows 10, 11, macOS), then he is required to utilize Edge. 
+
 ## Related content
 
 For more information, see [Microsoft Defender for Cloud Apps Conditional Access app control](proxy-intro-aad.md).