How can one enable a safari extension for users using an MDM

Question

Level 1

4 points

How can one enable a safari extension for users using an MDM

I've looked at SafariExtensionSettings | Apple Developer Documentation, but I'm not sure how I'm supposed to configure this via an MDM. I have Rippling, jamf and kandji at my disposal for testing, all of which support DDM.

I created a .mobileconfig file and pushed it via Rippling (this is the only way to configure custom profiles) with the following content (but signed), but this doesn't seem to work. Could someone help in generating the correct config if it is feasible? Rippling support have been of no help (they say that Rippling does not provide support for creating configuration settings).

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>ManagedExtensions</key>
			<dict>
				<key>ai.nightfall.Nightfall-DLP-for-Browsers.Extension (4QRDR8M75S)</key>
				<dict>
					<key>AllowedDomains</key>
					<array>
						<string>*</string>
					</array>
					<key>PrivateBrowsing</key>
					<string>AlwaysOn</string>
					<key>State</key>
					<string>AlwaysOn</string>
				</dict>
			</dict>
			<key>PayloadDisplayName</key>
			<string>Safari Extension Settings</string>
			<key>PayloadIdentifier</key>
			<string>com.apple.configuration.safari.extensions.settings.07621422-4416-4354-944A-57F9940A7C15</string>
			<key>PayloadType</key>
			<string>com.apple.configuration.safari.extensions.settings</string>
			<key>PayloadUUID</key>
			<string>07621422-4416-4354-944A-57F9940A7C15</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>Safari Extension Management</string>
	<key>PayloadIdentifier</key>
	<string>ai.nightfall.safari.extensions</string>
	<key>PayloadScope</key>
	<string>User</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>F9D22BF3-15BF-4D8A-8A32-51E0C741BF89</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>

Posted on Oct 31, 2025 5:24 AM

Reply

Answer 1

leroydouglas

Level 10

200,196 points

Oct 31, 2025 9:32 AM in response to nishant_nf

nishant_nf wrote:

I've looked at SafariExtensionSettings | Apple Developer Documentation, but I'm not sure how I'm supposed to configure this via an MDM. I have Rippling, jamf and kandji at my disposal for testing, all of which support DDM.

I created a .mobileconfig file and pushed it via Rippling (this is the only way to configure custom profiles) with the following content (but signed), but this doesn't seem to work.