The Jamf Connect Sync browser extension allows administrators to determine what webpage a user is redirected to when signing in to the Okta sign-in page.
Browser extensions for Jamf Connect Sync are available for the following browsers:
Jamf Connect Sync includes an extension for Safari as part of the Jamf Connect Sync application bundle.
This extension is sandboxed and signed. It follows Apple’s Application Extension programming guidelines and can only pass data with Jamf Connect Sync via a Shared App Group key.
Note: Only the redirect URL is passed between Jamf Connect Sync and Apple's Application Extension programming.
Safari adds this extension the first time that Jamf Connect Sync is launched but does not enable it. Only the user can enable the extension, and administrators can alert them via the Jamf Connect Sync Preferences.
The Jamf Connect Safari Extension is only able to modify URLs ending in the following:
When enabled, going to a website with the specified URL endings will trigger the Jamf Connect Sync Sign In window. The user then authenticates to Okta. If successful, the user is redirected to their Okta dashboard.
Jamf Connect Sync can use a Google Chrome browser extension offered by Jamf on the Google Chrome Web Store. A configuration profile to enable the Chrome extension is included in the Jamf Connect Sync package.
Jamf Connect Sync also includes a Chrome Native Messaging Handler. The Chrome Native Messaging Handler works with the Chrome Extension to open Jamf Connect Sync and the Sign In window.
When the Chrome extension is enabled, going to a website with the specified URL ending will trigger the Jamf Connect Sync Sign In window. The user then authenticates to Okta. If successful, the user is redirected to their Okta dashboard.
Administrators can also force the Chome extension to be installed on a user's computer. For instructions on forcing an extension installation in Google Chrome, see the following Google Chrome documentation: http://dev.chromium.org/administrators/policy-list-3#ExtensionInstallForcelist