Use the CyberArk Identity Browser Extension

This topic describes how to install and use the CyberArk Identity Browser Extension to access your CyberArk Identity User Portal, launch applications without the User Portal, generate passwords, and more.

Install the CyberArk Identity Browser Extension

Applications with the jigsaw puzzle symbol require you to add the CyberArk Identity Browser Extension to your browser before you can open the application.

You have the following options to install the Browser Extension.

  • Click the link in the banner on the Apps page above the application icons.
  • Launch an application that requires the Browser Extension, then click the link in the pop-up that prompts users to install the Browser Extension.

  • Download the browser extension from the relevant web store.

The jigsaw puzzle symbol is removed from all application icons after you install the Browser Extension.

The following procedures describe how to install the Browser Extension using the link in the banner on the Apps page.

  1. Click the Apps page.

  2. Click "here" in the banner to initiate the download and installation of the browser extension.

  3. The browser opens a new tab to download and install the browser extension.

  4. Click Continue in response to the prompt “Are you sure you want to continue?” at the bottom of the window.

    The browser downloads the extension for Chrome.

  5. Click Add.

    This installs the extension in Chrome.

  6. Close the tab used to download and install the extension.

    You can now open all applications that require the browser extension.

  1. Click the Apps page.

  2. Click "here" in the banner to initiate the download and installation of the browser extension.

    A window with installation instructions appears.

  3. Click Download to begin the installation process.

    You are redirected to the Edge store.

  4. Click Get, then click Add extension.

    Edge installs the Browser Extension.

  5. Return to the User Portal, then sign-in at the prompt.

    You can now open all applications that require the browser extension.

  1. Click the Apps page.

  2. Click "here" in the banner to initiate the download and installation of the browser extension.

  3. Click Allow in the Firefox pop up window.

    Firefox downloads the extension.

  4. Click Install, then click Add.

  5. Click Restart Now.

    The browser extension is installed.

    Mozilla has discontinued sideloading extensions as of Firefox 73; you will no longer be able to install extensions by placing extensions in the extensions folder.

Display the Browser Extension in your browser's toolbar

The CyberArk Identity Browser Extension might not be visible in your browser's toolbar by default. The following procedures describe how to display the Browser Extension in your browser's toolbar for easy access.

Click the Extensions icon, then click the Pin icon next to the CyberArk Identity Browser Extension.

Click the Extensions icon, then click the Show in toolbar icon next to the CyberArk Identity Browser Extension.

  1. Right click the toolbar, then click Customize Toolbar.

  2. Drag the CyberArk Identity Browser Extension to the desired location in the toolbar.

Sign in to the Browser Extension

To sign in to the Browser Extension, click then extension icon in your browser, then click Sign In.

Open your User Portal from the Browser Extension

You can use the Browser Extension to open your User Portal in a new tab.

  1. Click the Browser Extension icon in your browser.
  2. Click the user icon to launch your User Portal in a new tab.

Launch applications from the Browser Extension

You can launch applications from the Browser Extension without opening User Portal.

To launch applications from the Browser Extension

  1. Click the Browser Extension icon in your browser.
  2. Find the application that you want to launch.

    You can use the drop-down menu to filter apps (for example, recently or frequently used) or you can use the search field.

  3. Click the application name in the list.

Copy credentials

For easy access, you can copy the username or password of a saved application from the Browser Extension context menu on the application sign-in page. You do not need to access the CyberArk Identity User Portal to obtain these credentials. This feature is available when you sign in to an application or change a password on a website.

For MFA-enabled applications, you can copy the username but not the password.

Before using this feature, confirm the following:

  • The application you need to access has already been added to the CyberArk Identity.

  • Your administrator has granted you View permission to copy admin-shared credentials or other user-shared credentials.

  • You are signed in to the Browser Extension.

To copy credentials from the CyberArk Identity Browser Extension context menu:
  1. Type the application URL in the address bar in the browser.

  2. On the application sign-in page, in the Username or Email field, right-click to see the context menu and the CyberArk icon.

  3. Select CyberArk and copy the username or password.

    If you have multiple accounts for an application, all usernames for those accounts are displayed.

Change where the Browser Extension launches applications

You can choose to launch applications from the Browser Extension in the current tab or in a new tab.

  1. Click the Browser Extension icon in your browser.

    The Browser Extension menu opens to the Applications tab.

  2. Select Open apps in a new browser tab to launch apps in a new tab.

Generate strong passwords with the CyberArk Identity Password Generator

Some of your business applications require you to sign up using credentials that are different than your corporate credentials. Instead of reusing a weak password so you can remember it, you can use the Password Generator to generate a strong, random password and use it during the business application sign up process or when you need to change the password. The Browser Extension can then automatically save your credentials (if Land & Catch is enabled) so you can launch the application from the CyberArk Identity User Portal or Browser Extension with one click. This reduces security threats and simplifies your sign up and sign in experience.

The CyberArk Identity Password Generator is available on the Browser Extension version 21.7 or later. Contact your system administrator for an updated Browser Extension if you don't see the Password Generator.

Generate new passwords with the CyberArk Identity Password Generator

You can access the CyberArk Identity Password Generator from the Browser Extension or from a context menu when you right-click in a text input field of an application sign in page. For the context menu method, you do not need to be logged into the Browser Extension.

  1. Verify that you are signed in to the Browser Extension.

  2. Click the Browser Extension, then click the Password Generator icon.

    The Password Generator displays.

  3. Change the options as needed to comply with your business application's password requirements.

    If your password doesn't comply on the first attempt, you can change the settings and click Re-Generate Password to create a new password based on the updated settings.

  4. Click Copy Password to save the password to your clipboard, then use it in your application.

  1. In the application sign in page, right-click inside one of the text input fields for user name or password.

  2. Click the Password Generator icon.

    The Password Generator displays.

  3. Change the options as needed to comply with your business application's password requirements.

    If your password doesn't comply on the first attempt, you can change the settings and click Re-Generate Password to create a new password based on the updated settings.

  4. Click Copy Password to save the password to your clipboard, then use it in your application.

Update passwords with the Password Generator

The CyberArk Identity Password Generator simplifies the process of changing your password to a strong password.

This feature requires version 22.2 of the CyberArk Identity Browser Extension. Enable Land & Catch for an optimal experience.
  1. In the application's change password page, click the Browser Extension icon in the field for the existing password, then select the account and click Fill.

    The Browser Extension fills your existing password.

  2. Click the Browser Extension icon in the new password field, then click Fill Password.

    You can click Show Details to change the parameters of the password to meet your application's requirements, or click refresh to generate a new password.

    The Browser Extension fills the new password in both the new password field and the field to confirm the new password.

  3. Click the appropriate button to finish the change password procedure in your application.

  4. Click Update when the Browser Extension offers to update the password.

    This only happens if you have Land & Catch enabled.

Troubleshoot the Browser Extension

The first thing to do if you have challenges using the Browser Extension is to make sure that you are signed in.

Refer to the following sections for more specific challenges and solutions.

Land & Catch - added applications are not available

Solution: Refresh the app cache

Your system administrator might have changed the applications deployed to you or the tags used to organize them. You can refresh your app cache to update the Browser Extension with the latest information.

  1. Click the Browser Extension icon in your browser.

    The Browser Extension menu opens to the Applications tab.

  2. Click the refresh icon to the left of the applications filter drop-down menu.

Land & Catch - The Browser Extension doesn't offer to add a new app

Solution: Verify that Land & Catch is enabled

Enable Land & Catch in your browser

Solution: Clear the list of skipped sites

If you clicked Never at any of the prompts to add a site to your User Portal but later change your mind, you can clear the list of skipped sites by clicking the Browser Extension icon in your browser, then selecting Clear Skipped Sites... .

You can't sign in

Solution: Change your Portal Hostname

The portal hostname does not typically have to change from its default value; however, if your company uses multiple tenants, your system administrator might request that you change the portal hostname to an appropriate value for your tenant.

  1. Click the Browser Extension icon in your browser, then click the gear icon to go to the Settings tab.
  2. Expand Advanced, then enter the name of your tenant in the Portal Hostname field.

    The portal hostname typically takes the format <tenant>.Idaptive.com. You will see a red X in the field for invalid hostnames, and a green checkmark after entering a valid hostname.

Your system administrator wants the Browser Extension diagnostics log

Solution: Export the diagnostics log

Your system administrator might need you to export the Browser Extension diagnostics log to assist in troubleshooting.

  1. Click the Browser Extension icon in your browser, then click the gear icon to go to the Settings tab.
  2. Expand Advanced, the then click Export Diagnostics Log.

    If requested by your administrator, select Enable diagnostics log. Enabling this setting adds more detail to the diagnostics log. even with this setting disabled, diagnostic logs containing less detail are still available for export.

    The log is downloaded to your browser's default download location. The filename takes the format BElog-YYYYMMDD-HHMMSS.bin.

The Browser Extension doesn't autofill my credentials

Solution: Disable browser password prompts and autofill

If you are signed in to the CyberArk Identity Browser Extension and you already refreshed your app cache, the Browser Extension might conflict with your browser's features to save and autofill sign in credentials and other information.

Disable password prompts in Chrome

In order suppress the prompt to save passwords in your Chrome browser, select Disable Browser Password Prompts in the CyberArk Identity Browser Extension. When this option is selected, the Chrome privacy permission, Change your privacy related settings, is enabled in Chrome Extensions. This permission is required in order for the Browser Extension to suppress the prompt to save passwords in Chrome.

  1. Click the Browser Extension icon in your browser.
  2. Click the gear icon (Settings) and select Disable Browser Password Prompts.

  3. If the following message is displayed, click Allow.

Disable or enable autofill in Chrome

https://support.google.com/chrome/answer/142893