> For the complete documentation index, see [llms.txt](https://boza.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://boza.gitbook.io/docs/browser-extension/deployment/other-mdm.md).

# Other MDM

If you manage macOS devices with an MDM that does not have a native Boza integration — for example **Mosyle**, **Kandji**, **Workspace ONE**, or **Hexnode** — you can still deploy the Boza extension using a **configuration profile** (`.mobileconfig`) that Boza provides.

{% hint style="info" %}
**Using Jamf or Intune?** Use the dedicated guides instead — they are more detailed:

* [Deploy via Jamf](/docs/browser-extension/deployment/jamf.md) (recommended for Apple devices) or [Jamf via Profile](/docs/browser-extension/deployment/jamf-via-profile.md)
* [Deploy Safari via Microsoft Intune](/docs/browser-extension/deployment/safari-intune.md)
  {% endhint %}

## What the Profile Contains

A single configuration profile covers all three macOS browsers in one file:

| Payload                                                         | Browser | What it does                                     |
| --------------------------------------------------------------- | ------- | ------------------------------------------------ |
| `com.google.Chrome`                                             | Chrome  | Force-installs the extension                     |
| `com.google.Chrome.extensions.lgdogpphmkjofjogicpokolmlmcfilja` | Chrome  | Configures auto-login (`userEmail`, `secretKey`) |
| `org.mozilla.firefox`                                           | Firefox | Force-installs and configures the extension      |
| `com.boza.safari.Extension`                                     | Safari  | Configures auto-login for the Safari extension   |

{% hint style="info" %}
For **Safari**, the configuration profile is not enough on its own — the Boza Safari extension is bundled inside the **Boza - Extension** app (bundle ID `com.boza.safari`), which must be installed separately from the Mac App Store. See [Step 3](#step-3-safari-only-install-the-app) below.
{% endhint %}

## Step 1 — Create the Configuration Profile

Copy the profile below into a text editor and save it as `boza-extension.mobileconfig`. Make two replacements before uploading:

* **`YOUR_SECRET_KEY_HERE`** → your Boza extension secret key. **Boza provides this** — ask your Account Executive for it.
* **`YOUR_ORG`** → a short identifier for your organization (for example, your domain). Replace it in every `PayloadIdentifier`.

Leave **`userEmail`** as the literal **`$EMAIL`** — how it's resolved depends on your MDM (see [Step 4](#step-4-auto-login-and-the-email-variable)).

```xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <!-- Chrome: force-install the extension -->
        <dict>
            <key>PayloadType</key>
            <string>com.google.Chrome</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>com.boza.profile.chrome.forcelist.YOUR_ORG</string>
            <key>PayloadUUID</key>
            <string>D1111111-0000-4000-8000-000000000001</string>
            <key>PayloadDisplayName</key>
            <string>Boza - Chrome Extension Force Install</string>
            <key>ExtensionInstallForcelist</key>
            <array>
                <string>lgdogpphmkjofjogicpokolmlmcfilja;https://clients2.google.com/service/update2/crx</string>
            </array>
        </dict>
        <!-- Chrome: auto-login config -->
        <dict>
            <key>PayloadType</key>
            <string>com.google.Chrome.extensions.lgdogpphmkjofjogicpokolmlmcfilja</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>com.boza.profile.chrome.config.YOUR_ORG</string>
            <key>PayloadUUID</key>
            <string>D2222222-0000-4000-8000-000000000002</string>
            <key>PayloadDisplayName</key>
            <string>Boza - Chrome Extension Config</string>
            <key>userEmail</key>
            <string>$EMAIL</string>
            <key>secretKey</key>
            <string>YOUR_SECRET_KEY_HERE</string>
        </dict>
        <!-- Firefox: force-install + auto-login config -->
        <dict>
            <key>PayloadType</key>
            <string>org.mozilla.firefox</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>com.boza.profile.firefox.YOUR_ORG</string>
            <key>PayloadUUID</key>
            <string>D3333333-0000-4000-8000-000000000003</string>
            <key>PayloadDisplayName</key>
            <string>Boza - Firefox Extension</string>
            <key>EnterprisePoliciesEnabled</key>
            <true/>
            <key>ExtensionSettings</key>
            <dict>
                <key>extension-firefox@getboza.io</key>
                <dict>
                    <key>installation_mode</key>
                    <string>force_installed</string>
                    <key>install_url</key>
                    <string>https://addons.mozilla.org/firefox/downloads/latest/extension-firefox@getboza.io/latest.xpi</string>
                </dict>
            </dict>
            <key>3rdparty</key>
            <dict>
                <key>Extensions</key>
                <dict>
                    <key>extension-firefox@getboza.io</key>
                    <dict>
                        <key>userEmail</key>
                        <string>$EMAIL</string>
                        <key>secretKey</key>
                        <string>YOUR_SECRET_KEY_HERE</string>
                    </dict>
                </dict>
            </dict>
        </dict>
        <!-- Safari: auto-login config (app installed separately from the Mac App Store) -->
        <dict>
            <key>PayloadType</key>
            <string>com.boza.safari.Extension</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadIdentifier</key>
            <string>com.boza.profile.safari.YOUR_ORG</string>
            <key>PayloadUUID</key>
            <string>D4444444-0000-4000-8000-000000000004</string>
            <key>PayloadDisplayName</key>
            <string>Boza - Safari Extension</string>
            <key>userEmail</key>
            <string>$EMAIL</string>
            <key>secretKey</key>
            <string>YOUR_SECRET_KEY_HERE</string>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Boza Browser Extension</string>
    <key>PayloadIdentifier</key>
    <string>com.boza.profile.YOUR_ORG</string>
    <key>PayloadRemovalDisallowed</key>
    <false/>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>D0000000-0000-4000-8000-000000000000</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadOrganization</key>
    <string>Boza</string>
</dict>
</plist>
```

{% hint style="warning" %}
Once you've added your secret key, treat the saved file as confidential — don't reuse it across organizations or share it outside your IT team.
{% endhint %}

## Step 2 — Upload it as a Custom Profile

In your MDM, upload the `.mobileconfig` as a **custom configuration profile** (the exact menu name varies by vendor):

* **Mosyle:** Management Profiles > **+** > **Custom Profile / Custom Configuration**
* **Kandji:** Library > Add New > **Custom Profile**
* **Workspace ONE:** Resources > Profiles & Baselines > Add > **Upload** a custom profile
* **Hexnode:** Policies > New Policy > macOS > **Custom Configuration**

Assign the profile to your target macOS device groups, on the **device** channel.

## Step 3 — Safari Only: Install the App

For the Safari extension to appear, install the **Boza - Extension** app on your Macs:

1. Add the free **Boza - Extension** app from the Mac App Store / Apple Business Manager.
2. Deploy it to the same device groups (silent install via your MDM's app-deployment feature).
3. Users enable the extension once under **Safari > Settings > Extensions**.

Chrome and Firefox do not require this step — they download the extension from their web stores via the policy in the profile.

## Step 4 — Auto-login and the `$EMAIL` Variable

The profile identifies each user with the `$EMAIL` variable so the extension can log them in automatically.

{% hint style="warning" %}
**`$EMAIL` is a Jamf substitution variable.** Jamf replaces it with each device's assigned email automatically. Most other MDMs do **not** substitute `$EMAIL` inside an uploaded custom profile.

* If your MDM supports a per-device email variable, replace `$EMAIL` with that MDM's variable syntax before uploading, or configure substitution so each device receives its user's address.
* If it does not, the **secret key** still applies (shared across the org), but the per-user email cannot be injected — users **sign in once via SSO** when they first open the extension.
* For fully automatic per-user auto-login, [Jamf](/docs/browser-extension/deployment/jamf.md) is the recommended MDM.
  {% endhint %}

## Validate the Deployment

* **Chrome:** open `chrome://policy` and confirm the Boza extension policy and `secretKey` are present; check `chrome://extensions`.
* **Firefox:** open `about:policies` and confirm the extension policy is applied.
* **Safari:** confirm the Boza app is installed (`ls /Applications/Boza.app`) and the managed preferences exist:

```bash
sudo cat "/Library/Managed Preferences/com.boza.safari.Extension.plist"
```

* **Profile installed:** **System Settings > General > Device Management**, or `sudo profiles list | grep -i boza`.

***

## Related

* [Deploy via Jamf](/docs/browser-extension/deployment/jamf.md) — recommended for Apple devices (full auto-login)
* [Deploy via Jamf (Profile)](/docs/browser-extension/deployment/jamf-via-profile.md) — manual `.mobileconfig` upload to Jamf
* [Deploy Safari via Microsoft Intune](/docs/browser-extension/deployment/safari-intune.md)

Need help? Contact the Boza team at **<support@getboza.io>**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://boza.gitbook.io/docs/browser-extension/deployment/other-mdm.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.