Skip to main content
This Library Item is available for Mac computers, iOS devices, and iPadOS devices

​
What are Safari Extensions?

Safari extensions on Mac, iPhone, and iPad let people customize Safari. Extensions can block ads, manage passwords, and improve privacy. With Iru, you can allow, require, or restrict Safari extensions, and choose which domains an extension can use. The states are Allowed, Always On, and Always Off, along with allowed and denied domains.
This Library Item requires supervision.

​
Safari Extensions on Mac

On a Mac, the Safari Extensions Library Item installs on the user channel, so it applies only to MDM-enabled users. If a user does not receive the settings, see MDM-enabled users and user channel profiles. To see the result on the Mac, open the Safari app, choose Safari > Settings, then select Extensions.

​
Add and Configure the Safari Extensions Library Item

To add this Library Item to your Iru Endpoint Library, follow the steps outlined in the Library Overview article.
1

Navigate to Library

Navigate to the Library and select Add Library Item.
2

Select Safari Extensions

Search for and select Safari Extensions. You can also open an existing Safari Extensions Library Item to edit it.
3

Name the Library Item

Give the Safari Extensions Library Item a Name.
4

Choose where to install

Under Install on, select Mac, iPhone, iPad, or a combination.
5

Assign to Blueprints

Assign to your desired Blueprints.

​
Configure global settings

1

Turn configuration for all extensions on or off

At the top right of Configuration for all extensions, toggle the switch on to set global settings for every Safari extension. If you do not need global settings, toggle the switch off and continue to Configure a specific extension.
2

Select the global state

Under State, choose Allowed, Always On, or Always Off for all extensions. Allowed lets users turn extensions on or off.
3

Select the global Private Browsing state

Under State in Private Browsing, choose Allowed, Always On, or Always Off for all extensions in Private Browsing.
4

Configure allowed domains (optional)

Under Allowed domains, select Add and enter a domain. Wildcards such as *.kandji.io are supported.
5

Configure denied domains (optional)

Under Denied domains, select Add and enter a domain. Wildcards such as *.kandji.io are supported.

​
Configure a specific extension

1

Add a specific extension

Select Add configuration for a specific extension.
2

Enter the Bundle ID

Enter the Bundle ID of the extension.
3

Enter the Team ID

Enter the Team ID. This is the Apple Developer Team ID of the developer of the extension.
4

Select the extension state

Under State, choose Allowed, Always On, or Always Off.
5

Select the extension Private Browsing state

Under State in Private Browsing, choose Allowed, Always On, or Always Off.
6

Configure extension allowed domains (optional)

Under Allowed domains, select Add and enter a domain. Wildcards such as *.kandji.io are supported.
7

Configure extension denied domains (optional)

Under Denied domains, select Add and enter a domain. Wildcards such as *.kandji.io are supported.
8

Add or remove a specific extension

To configure another extension, select Add configuration for a specific extension. To delete one, select Remove at the top right of that Specific extension configuration section.
9

Save configuration

Select Save.

​
Considerations

Global and specific settings

You can combine Configuration for all extensions with settings for a specific extension. For example, set the global State to Always Off, then allow one extension.

Install the extension app

The app that contains the extension must be installed separately. On iPhone and iPad, use an Apps and Books Library Item.

Bundle ID and Team ID

Please contact the software developer to find an extension’s Bundle ID and Team ID.
For more information, see Apple’s Safari extensions management declarative configuration guide and Safari extensions developer documentation.

​
Troubleshooting

If Safari Extensions is not applying for a user on a Mac, confirm that user is MDM-enabled before you change the Library Item. See MDM-enabled users and user channel profiles to check the device record, Prism, and Automated Device Enrollment.
To confirm the result on the Mac, open the Safari app, choose Safari > Settings, then select Extensions.

MDM-enabled users and user channel profiles

Confirm which local users can receive Safari Extensions, and troubleshoot a profile that is not applying

Library Overview

Add this Library Item to the Library.

Configuring Blueprints

Choose which devices receive the Safari Extensions settings.