Safari extensions

Safari extensions enhance and customize the web browsing experience on iPhone. With iOS 18, the organizations can now use MDM solutions to manage how Safari extensions are used on supervised devices. For example, a business may want specific extensions installed and turned on to provide access to internal services, or an educational institution may want to prevent students from using extensions that provide information that goes against school policy. These extension management features work for standard browsing and private browsing and include the following:

  • Defining which extensions are allowed

  • Controlling which extensions are always on or always off

  • Configuring an extension to access websites by specific domains and sub domains

Procedure 

  1. Select Policies & Configs > Policies.

  2. Select Add New > Apple > iOS / macOS > Software Update Settings.

  3. Use the guidelines in the Safari Extensions Settings table below to complete the New Safari Extensions Settings dialog box.
  4. Select Save.
  5. Apply the policy to an iOS or macOS label.
Table 27.  Safari Extensions Settings

Item

Description

Name

Enter a name for the policy.

Status

Select the relevant radio button to indicate whether the policy is Active or Inactive.

Only one active policy can be applied to a device.

Priority

Specifies the priority of this policy relative to other custom policies of the same type. This priority determines which policy is applied if more than one policy is available.

Select Higher than or Lower than, then select an existing policy from the drop-down list.

For example, to give Policy 'A' a higher priority than Policy B, you would select “Higher than” and “Policy B”.

Description

Enter an explanation of the purpose of this policy.

Add Safari Extension

 

Identifier

Enter the identifierof the extension such as ad blocker.

Team Identifier

Enter the team identifier

Allowed Domain

Controls the domains and sub-domains the extension is granted access to. Any non-prefixed domains take precedence over prefixed domains, and Denied Domains takes precedence over Allowed Domains. Any domains not specified in Allowed Domains or Denied Domains are configurable by the user.

Denied Domains

Controls the domains and sub-domains the extension that is not allowed to access. Any non-prefixed domains take precedence over prefixed domains, and Denied Domains takes precedence over Allowed Domains. Any domains not specified in Allowed Domains or Denied Domains are configurable by the user.

Private Browsing

Controls whether an extension is allowed in Private Browsing.

Select the appropriate option from the drop down menu:

  • Allowed: The user is allowed to turn the extension on or off in Private Browsing.

  • Always On: The extension will always be on in Private Browsing if the extension is on outside of Private Browsing.

  • Always Off: The extension will never be on in Private Browsing.

    Possible Values: Allowed, AlwaysOn, AlwaysOff

 

State

Controls whether an extension is allowed.

Select the appropriate option from the drop down menu:

  • Allowed: The user is allowed to turn the extension on or off.

  • Always On: The extension will always be on.

  • Always Off: The extension will always be off.

    Possible Values: Allowed, AlwaysOn, AlwaysOff