How to install the Securly Edge Extension with Intune

ID: bmlalgfmolfmkjmnikbphgijefopggme

Update URL:  https://crextnaut.securly.com/subscribers/{fid}/update-manifest.xml

You can find your FID on the Settings page of your filter account. It is the email address at the end of the SmartPAC URL. 

If you prefer to copy and paste, go to Filter, settings in the bottom right, and the account details sub-menu.  Once there, you'll see extension IDs.  You'll want to copy the string next to Edge Browser ID from the bmla**************.xml    This URL is unique to your account.

 

Steps:

1. Sign in to the Microsoft Endpoint Manager admin center

2. Select Devices > Windows > Configuration > Create New Policy. 

3. Select ‘Platform’, ‘Windows 10 and later’, and then select ‘Profile type’ “Settings catalog”. Click on the Create button.

4. On the Basics tab, enter a descriptive name, such as ‘Manage Edge Extension’, then select Next. 

*Note this will manage all extensions for Edge, similar to GAC managing Chrome extensions.

5. In Configuration settings, select “+ Add settings”.

6. Search for “Edge” and select ‘Microsoft Edge\Extensions’ to see all the settings in this category. 

7. Select ‘Control which extensions are installed silently’.  This can be done by user, or by device.  After enabling this feature, a blank box will appear. Now enter the extension ID followed by a semicolon and the custom URL with no spaces in the box.

8. Navigate back to ‘Settings picker’. Select ‘Control which extensions cannot be installed' enable this setting and add “*”. This will prevent other extensions from installing in the Edge browser. 

9. In the ‘Settings picker’ select “Configure extension management settings” for device or user depending on where you are deploying this and enable it on the left.  Then add the following string to the box: {"bmlalgfmolfmkjmnikbphgijefopggme":{"override_update_url":true}}

 

 

10. In the ‘Settings picker’ select "Control Manifest v2 extension availability", check to enable it and select 'Manifest v2 is enabled' from the drop down.

11. In the ‘Assignments’ section select the device/user groups you want to target. 

When the configuration policy is complete, it will take time for the extension to push out for the users. It will depend on the sync frequency between the Windows device and InTune. If you have a testing device handy, you can find the device and force the sync. Learn more about that here.