With Windows 10 1607 from last year it is possible to use extensions for Microsoft Edge browser that are delivered from Windows Store.
In a Modern Device management scenario where Windows 10 is MDM managed with Intune – we have a way to deploy extensions for Microsoft Edge Browser with Windows Store for Business integrated with Intune.
First we have to “buy” the extension from Windows Store for Business.
I will get “Access Panel Extension App”
Click Get the app
Then the “Access Panel Extension” app is in the inventory – and next time Intune do a sync with Windows Store for Business the app shows up in the Intune Portal.
This extension is required to access specific applications at https://myapps.microsoft.com, also known as the Access Panel, which provides single sign-on to cloud applications within your organization.
Here you can see more examples on Extensions for Microsoft Edge:
After Intune has done the sync with Windows Store for Business the app shows up in Intune.
Go the Intune Portal and click on mobile apps
Find the “Access Panel Extension”
- Click on Assignments
- Select groups
- Search for the group you what to deploy it to
- Select the group
- Click select
- Select Type = Required
- Click save
Now it is starting to deploy to the groups of users the next time there Windows 10 devices is syncing with Intune.
And the “Access Panel Extension” is getting installed on the device
This works with Windows 10 1607.
Windows 10 1703 it gets an error when trying to install the app!
Log for it in the local event viewer under:
Microsoft – Windows – DeviceManagement-Enterprise-Diagnostics-Provider
MDM ConfigurationManager: Command failure status. Configuration Source ID: (50B3A9E8-75A3-474E-B2D8-072962538F1A), Enrollment Name: (MDMFull), Provider Name: (EnterpriseModernAppManagement), Command Type: (Execute), CSP URI: (./User/Vendor/MSFT/EnterpriseModernAppManagement/AppInstallation/Microsoft.AccessPanelExtension_8wekyb3d8bbwe/StoreInstall), Result: (Server execution failed).
Workaround – the user can install it from Windows store here : https://www.microsoft.com/en-us/store/p/access-panel-extension/9pc9sckkzk84
Cloud First 
Hey Per! This is an older article, but insightful nonetheless. I am wondering also if it is possible to block users from installing their own extensions (assigned extensions only)?
Do you mean the old edge or the new one?
The new one if possible–deploying that everywhere as we speak…
The new one it is easy- I have a blogpost on how to manage extentions on the new edge
Ah, so you do–thank you! I think I found it here (this also prevents them from adding their own, right?): https://osddeployment.dk/2019/09/15/managed-browser-extensions-on-edge-insider-with-intune/