Edge extension via Intune (macOS)

This guide deploys the Scribe browser extension to Microsoft Edge on Intune-managed Macs and configures it to enable silent authentication through your Microsoft Entra identity, a reduced interface for background-capture users, and other extension settings.

Prerequisites

• Intune-enrolled Macs with Edge installed.
• For silent authentication: single sign-on set up for your Scribe organisation with Entra as the identity provider (see Browser extension - set up single sign-on with Microsoft Entra).
• For silent authentication: users exist in Scribe with emails matching their Entra sign-in names.
• Scribe Edge extension ID:ejommccbnocgekjphflienmbmkallcef

Step 1 - Give Edge the user's Microsoft identity

For silent authentication, Edge needs the user's Entra identity. On Intune-managed Macs the standard way is the Microsoft Enterprise SSO extension: Intune → Devices → macOS → Configuration → Create → Settings catalog → Authentication → Extensible Single Sign On, with extension identifier:

com.microsoft.CompanyPortalMac.ssoextension, team identifier UBF8T346G9, type Redirect, and the URLs https://login.microsoftonline.com, https://login.microsoft.com, https://sts.windows.net. Assign it to a user group.

With it in place, Edge offers the work account on first run and Microsoft sign-in pages complete without prompts. Without it, each user signs in to a Microsoft 365 page in Edge once.

Step 2 - Deploy the extension and its configuration

Both go in one custom configuration profile: Intune → Devices → macOS → Configuration → Create → Templates → Custom → upload a .mobileconfig → deployment channel Device → assign.

The profile contains two payloads:

• Payload type com.microsoft.Edge with key ExtensionInstallForcelist, an array holding one string: ejommccbnocgekjphflienmbmkallcef;<https://edge.microsoft.com/extensionwebstorebase/v1/crx>
• Payload type com.microsoft.Edge.extensions.ejommccbnocgekjphflienmbmkallcef with the extension's configuration as native plist types: SilentLoginEnabled (boolean, true), SuppressWelcomeTab (boolean, true), Domain (string, your SSO domain).

Minimal mode. For users who only do background capture, add MinerVisibility as a string minimal to the extension payload: the extension reduces to a small status view, with no manual capture options and no regular popup or side panel. It works like the desktop app's minimal visibility mode.

All keys the extension payload accepts:

The complete profile: Set Domain to your SSO domain, adjust the other values and add any keys you need from the table above (MinerVisibility, for example) in the second payload, then save it as a .mobileconfig file:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "<http://www.apple.com/DTDs/PropertyList-1.0.dtd>">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadType</key>
			<string>com.microsoft.Edge</string>
			<key>PayloadIdentifier</key>
			<string>com.scribehow.edge.F3FFDE09-2F60-4FA4-B7ED-A3217E1553EB</string>
			<key>PayloadUUID</key>
			<string>F3FFDE09-2F60-4FA4-B7ED-A3217E1553EB</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>PayloadDisplayName</key>
			<string>Microsoft Edge - Scribe extension force-install</string>
			<key>PayloadEnabled</key>
			<true/>
			<key>ExtensionInstallForcelist</key>
			<array>
				<string>ejommccbnocgekjphflienmbmkallcef;<https://edge.microsoft.com/extensionwebstorebase/v1/crx></string>
			</array>
		</dict>
		<dict>
			<key>PayloadType</key>
			<string>com.microsoft.Edge.extensions.ejommccbnocgekjphflienmbmkallcef</string>
			<key>PayloadIdentifier</key>
			<string>com.scribehow.edge.extension.BB0D6246-CDCB-4F7A-BDFB-16537E3FFAA6</string>
			<key>PayloadUUID</key>
			<string>BB0D6246-CDCB-4F7A-BDFB-16537E3FFAA6</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>PayloadDisplayName</key>
			<string>Scribe extension configuration</string>
			<key>PayloadEnabled</key>
			<true/>
			<key>SilentLoginEnabled</key>
			<true/>
			<key>SuppressWelcomeTab</key>
			<true/>
			<key>Domain</key>
			<string>yourcompanydomain.com</string>
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>Scribe Edge extension</string>
	<key>PayloadIdentifier</key>
	<string>com.scribehow.edge.profile.502C5EAB-57E0-488C-846C-A7F2E208E262</string>
	<key>PayloadOrganization</key>
	<string>Scribe</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadScope</key>
	<string>System</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>502C5EAB-57E0-488C-846C-A7F2E208E262</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>

A ready profile with these two payloads - edit Domain to your SSO domain, remove the .xml suffix after download, upload:

Scribe-Edge-Extension.mobileconfig:

PayloadContent ExtensionInstallForcelist ejommccbnocgekjphflienmbmkallcef;https://edge.microsoft.com/extensionwebstorebase/v1/crx PayloadDisplayNameMicrosoft Edge - Scribe extension force-install PayloadEnabled PayloadIdentifier com.scribehow.edge.F3FFDE09-2F60-4FA4-B7ED-A3217E1553EBPayloadType com.microsoft.Edge PayloadUUID F3FFDE09-2F60-4FA4-B7ED-A3217E1553EB PayloadVersion 1 Domain yourcompany.comPayloadDisplayName Scribe extension configuration PayloadEnabled PayloadIdentifier com.scribehow.edge.extension.BB0D6246-CDCB-4F7A-BDFB-16537E3FFAA6 PayloadType com.microsoft.Edge.extensions.ejommccbnocgekjphflienmbmkallcef PayloadUUID BB0D6246-CDCB-4F7A-BDFB-16537E3FFAA6 PayloadVersion 1 SilentLoginEnabled SuppressWelcomeTab PayloadDisplayName Scribe Edge extension PayloadIdentifiercom.scribehow.edge.profile.502C5EAB-57E0-488C-846C-A7F2E208E262 PayloadOrganization Scribe PayloadRemovalDisallowed PayloadScope SystemPayloadType Configuration PayloadUUID 502C5EAB-57E0-488C-846C-A7F2E208E262 PayloadVersion 1

Verify on one Mac

1. System Settings → General → Device Management lists the profile.
2. The extension appears in edge://extensions.
3. Open Scribe in Edge: signed in with no interaction.
4. If you set MinerVisibility to minimal: click the extension's toolbar icon - it shows the small status view instead of the regular extension.