This guide deploys the Scribe browser extension to Microsoft Edge on Intune-managed Macs and configures it: silent authentication through your Microsoft Entra identity, a reduced interface for background-capture users, and the other extension settings.
Prerequisites
- Intune-enrolled Macs with Edge installed.
- For silent authentication: single sign-on set up for your Scribe organisation with Entra as the identity provider (see Browser extension - set up single sign-on with Microsoft Entra).
- For silent authentication: users exist in Scribe with emails matching their Entra sign-in names.
- Scribe Edge extension ID: ejommccbnocgekjphflienmbmkallcef
Step 1 - Give Edge the user's Microsoft identity
For silent authentication, Edge needs the user's Entra identity. On Intune-managed Macs the standard way is the Microsoft Enterprise SSO extension: Intune → Devices → macOS → Configuration → Create → Settings catalog → Authentication → Extensible Single Sign On, with extension identifier com.microsoft.CompanyPortalMac.ssoextension, team identifier UBF8T346G9, type Redirect, and the URLs https://login.microsoftonline.com, https://login.microsoft.com, https://sts.windows.net. Assign it to a user group.
With it in place, Edge offers the work account on first run and Microsoft sign-in pages complete without prompts. Without it, each user signs in to a Microsoft 365 page in Edge once.
Step 2 - Deploy the extension and its configuration
Both go in one custom configuration profile: Intune → Devices → macOS → Configuration → Create → Templates → Custom → upload a .mobileconfig → deployment channel Device → assign.
The profile contains two payloads:
- Payload type com.microsoft.Edge with key ExtensionInstallForcelist, an array holding one string: ejommccbnocgekjphflienmbmkallcef;https://edge.microsoft.com/extensionwebstorebase/v1/crx
- Payload type com.microsoft.Edge.extensions.ejommccbnocgekjphflienmbmkallcef with the extension's configuration as native plist types: SilentLoginEnabled (boolean, true), SuppressWelcomeTab (boolean, true), Domain (string, your SSO domain).
Minimal mode. For users who only do background capture, add MinerVisibility as a string minimal to the extension payload: the extension reduces to a small status view, with no manual capture options and no regular popup or side panel. It works like the desktop app's minimal visibility mode.
All keys the extension payload accepts:
| Key | Type and value | Effect |
|---|---|---|
| SilentLoginEnabled | boolean | Signs users in silently |
| Domain | string, your SSO domain | The domain users sign in with |
| SuppressWelcomeTab | boolean | Stops the welcome tab opening on first install |
| CheckAuthIntervalHours | real (number), minimum 0.1 | How often the extension re-checks sign-in status |
| MinerVisibility | string full / minimal | full is the normal extension. minimal reduces it to a small status view for users who only do background capture |
The complete profile. Set Domain to your SSO domain, adjust the other values and add any keys you need from the table above (MinerVisibility, for example) in the second payload, then save it as a .mobileconfig file:
A ready profile with these two payloads - edit Domain to your SSO domain, remove the .xml suffix after download, upload:
Verify on one Mac
- System Settings → General → Device Management lists the profile.
- The extension appears in edge://extensions.
- Open Scribe in Edge: signed in with no interaction.
- If you set MinerVisibility to minimal: click the extension's toolbar icon - it shows the small status view instead of the regular extension.