Use the CyberArk Identity Browser Extension

The CyberArk Identity Browser Extension might not be visible in your browser's toolbar by default. The following procedures describe how to display the Browser Extension in your browser's toolbar for easy access.

Sign in to the Browser Extension

To sign in to the Browser Extension, click then extension icon in your browser, then click Sign In.

You can launch applications from the Browser Extension without opening User Portal.

To launch applications from the Browser Extension

1. Click the Browser Extension button in your browser.

2. Find the app that you want to launch.

   You can use the drop-down menu to filter apps, or the search bar to search for a specific app by name.

3. Click the app name in the list.

   

Copy credentials

We provide the following ways to obtain the username or password of a saved application without opening the User Portal:

• Copy from the Browser Extension.

• Copy from the Browser Extension context menu on the application sign-in or change password page.

Before using this feature, confirm the following:

• The application you need to access has already been added to CyberArk Identity.

• You are signed in to the Browser Extension.

• You are permitted to view applications shared by administrators or other users.

Copy from the Browser Extension

You can copy the username and password from the list of applications that appears in the Browser Extension, or from a change password page.

1. In your browser, click CyberArk Identity Browser Extension icon at the top to open the list of applications.

2. Next to the application icon, hover the mouse to see the menu (three vertical dots) on the right.

   

3. Click the menu and select Copy username or Copy password.

Copy from the Browser Extension context menu

You can copy credentials from the Browser Extension context menu. This feature is available when you sign in to an application or change a password for an application.

1. Type the application URL in the address bar in the browser.

2. On the application sign-in page, in the Username or Email field, right-click to see the context menu and the CyberArk icon.

3. Select CyberArk and copy the username or password.

   If you have multiple accounts for an application, all usernames for those accounts are displayed.

Change where the Browser Extension launches applications

You can choose to launch applications from the Browser Extension in the current tab or in a new tab.

1. Click the Browser Extension icon in your browser.

   The Browser Extension menu opens to the Applications tab.

2. Select Open apps in a new browser tab to launch apps in a new tab.

   

Generate strong passwords with the CyberArk Identity Password Generator

Some of your business applications require you to sign up using credentials that are different than your corporate credentials. Instead of reusing a weak password so you can remember it, you can use the Password Generator to generate a strong, random password and use it during the business application sign up process or when you need to change the password. The Browser Extension can then automatically save your credentials (if Land & Catch is enabled) so you can launch the application from the Identity User Portal or Browser Extension with one click. This reduces security threats and simplifies your sign up and sign in experience.

Generate new passwords with the CyberArk Identity Password Generator

You can access the CyberArk Identity Password Generator from the Browser Extension or from a context menu when you right-click in a text input field of an application sign in page. For the context menu method, you do not need to be logged into the Browser Extension.

Update passwords with the Password Generator

The CyberArk Identity Password Generator simplifies the process of changing your password to a strong password.

1. In the application's change password page, click the Browser Extension icon in the field for the existing password, then select the account and click Fill.

   

   The Browser Extension fills your existing password.

2. Click the Browser Extension icon in the new password field, then click Fill Password.

   You can click Show Details to change the parameters of the password to meet your application's requirements, or click refresh to generate a new password.

   

   The Browser Extension fills the new password in both the new password field and the field to confirm the new password.

3. Click the appropriate button to finish the change password procedure in your application.

4. Click Update when the Browser Extension offers to update the password.

   This only happens if you have Land & Catch enabled.

Troubleshoot the Browser Extension

The first thing to do if you have challenges using the Browser Extension is to make sure that you are signed in.

Refer to the following sections for more specific challenges and solutions.

Unable to sign in to CyberArk Identity Browser Extension with a custom domain

Solution: Add dns.google.com to an allowlist

When using custom domains, an outgoing HTTPS call is made to dns.google.com to map the custom domain name to a CyberArk domain. Your organization needs to add the URL dns.google.com to an allowlist before you can sign in to the CyberArk Identity Browser Extension.

Unable to copy credentials from the CyberArk Identity Browser Extension after policy changes

Solution: Sign out from the CyberArk Identity Browser Extension and sign in again to copy the credentials

When your administrator makes policy changes, you must sign out from the Browser Extension and sign in again for new policy changes to take effect. If the issue persists, contact your administrator.

Land & Catch - added applications are not available

Solution: Refresh the app cache

Your system administrator might have changed the applications deployed to you or the tags used to organize them. You can refresh your app cache to update the Browser Extension with the latest information.

1. Click the Browser Extension button in your browser.

   The Applications tab is displayed.

2. Click the refresh icon to the left of the applications filter drop-down menu.

   

Land & Catch - The Browser Extension doesn't offer to add a new app

Solution: Verify that Land & Catch is enabled

Enable Land & Catch in your browser

Solution: Clear the list of skipped sites

If you clicked Never at any of the prompts to add a site to your User Portal but later change your mind, you can clear the list of skipped sites by clicking the Browser Extension button in your browser, then selecting Clear Skipped Sites... .

You can't sign in

Solution: Change your portal hostname

The portal hostname does not typically have to change from its default value; however, if your company uses multiple tenants, your system administrator might request that you change the portal hostname to an appropriate value for your tenant.

1. Click the Browser Extension button in your browser, then click the gear icon to go to the Settings tab.

2. Expand Advanced, then enter the name of your tenant in the Portal Hostname field.

   

   The portal hostname typically takes the format <tenant>.Idaptive.com A red X appears for invalid hostnames, and a green checkmark appears for valid hostnames.

Your system administrator wants the Browser Extension diagnostics log

Solution: Export the diagnostics log

Your system administrator might need you to export the Browser Extension diagnostics log to assist in troubleshooting.

1. Click the Browser Extension button in your browser, then click the gear button to go to the tab.

2. Expand Advanced, the then click Export Diagnostics Log.

   If requested by your administrator, select Enable diagnostics log. Enabling this setting adds more detail to the diagnostics log. even with this setting disabled, diagnostic logs containing less detail are still available for export.

   

   The log is downloaded to your browser's default download location. The filename takes the format BElog-YYYYMMDD-HHMMSS.bin.

The Browser Extension doesn't autofill my credentials

Solution: Disable browser password prompts and autofill

If you are signed in to the CyberArk Identity Browser Extension and you already refreshed your app cache, the Browser Extension might conflict with your browser's features to save and autofill sign in credentials and other information.