Use the CyberArk Identity Browser Extension

This topic describes how to install and use the CyberArk Identity Browser Extension to add applications to your User Portal, launch applications without the User Portal, and adjust the user experience to your preferences.

Install the CyberArk Identity Browser Extension

Applications with the jigsaw puzzle symbol require you to add the CyberArk Identity Browser Extension to your browser before you can open the application.

You have two options for installing the browser extension:

  • Click here in the banner.

  • Click any application icon that has the jigsaw puzzle symbol.

You only need to add this CyberArk Identity Browser Extension one time. After you do, the jigsaw puzzle symbol is removed from all of the application icons.

Installation instructions are browser specific and are performed when you are logged in to the User Portal.

Some applications require you to add the CyberArk Identity Browser Extension to your browser before you can open the application. You have two options for installing the browser extension:

  • Click here in the Admin Portal banner.
  • Launch any application that requires the Browser Extension and install it when prompted.

You only need to add the browser extension one time. Installation instructions are browser specific and are performed when you are logged in to the Admin Portal.

  1. Click the Apps page.

  2. Click "here" in the banner to initiate the download and installation of the browser extension.

  3. The browser opens a new tab to download and install the browser extension.

  4. Click Continue in response to the prompt “Are you sure you want to continue?” at the bottom of the window.

    The browser downloads the extension for Chrome.

  5. Click Add.

    This installs the extension in Chrome.

  6. Close the tab used to download and install the extension.

    You can now open all applications that require the browser extension.

  1. Click the Apps page.

  2. Click "here" in the banner to initiate the download and installation of the browser extension.

    A window with installation instructions appears.

  3. Click Download to begin the installation process.

    You are redirected to the Edge store.

  4. Click Get, then click Add extension.

    Edge installs the Browser Extension.

  5. Return to the User Portal, then sign-in at the prompt.

    You can now open all applications that require the browser extension.

  1. Click the Apps page.

  2. Click "here" in the banner to initiate the download and installation of the browser extension.

  3. Click Allow in the Firefox pop up window.

    Firefox downloads the extension.

  4. Click Install, then click Add.

  5. Click Restart Now.

    The browser extension is installed.

    If you have permission to add applications, the drop-down menu includes the Capture item--see Use App Capture. If you do not have the relevant permission, the drop-down menu just contains “Signed in.”

    Mozilla has discontinued sideloading extensions as of Firefox 73; you will no longer be able to install extensions by placing extensions in the extensions folder.

Open your User Portal from the Browser Extension

You can use the Browser Extension to open your User Portal in a new tab.

  1. Click the Browser Extension icon in your browser.
  2. Click the user icon to launch your User Portal in a new tab.

Use Land & Catch

Land & Catch recognizes when you enter credentials and offers to add the site to their user portal. The feature must be enabled by your system administrator via policy before you can enable or disable it on your computer.

Enable Land & Catch in your browser

  1. Click the Browser Extension icon in your browser, then click the gear icon to go to the Settings tab.

  2. Select Enable Land&Catch on this computer.

Use Land & Catch to add an app to your User Portal

  1. Go to the web site of an app that you want to add to theUser Portal, then log in with your credentials.

    The Browser Extension prompts you to add the site to your User Portal.

  2. Enter the name of the site as you want it to appear in your User Portal.

    The default name is the site with your username appended. This is useful if you have multiple accounts with the same service provider.

    In the following screen example, -a is the username (which is shown on the app when it is added to the user portal).

  3. (Optional) Click More, then enter a description or upload a custom app icon.

  4. Click Yes to add the app to your User Portal.

    If CyberArk Identity is configured to store application credentials in CyberArk PAM, then application credentials are stored and fetched from the PAM Vault.

Add a different account to your user portal for the same app

  1. Go to the web site of an app that you want to add to the user portal, then log in with your credentials.

    If the Browser Extension matches the domain to a site in your User Portal it asks if you would like to update your existing account or add a new account for that app.

  2. Click Add.
  3. Enter the name of the site as you want it to appear in your User Portal.

    The default name is the site with your username appended. This is useful if you have multiple accounts with the same service provider.

    In the following screen example, -b is the username (which is shown on the app when it is added to the user portal).

  4. (Optional) Click More, then enter a description or upload a custom app icon.
  5. Click Yes to add the app to your User Portal.

Update an existing app in your User Portal

  1. Go to the web site of an app that you want to update in the User Portal, then log in with your updated credentials.

    If the Browser Extension matches the domain to a site in your User Portal it asks if you would like to update your existing account or add a new account for that app.

  2. Click Update to update the credentials for the app in your User Portal.

Launch applications from the Browser Extension

You can launch applications from the Browser Extension without opening User Portal.

Launch applications

  1. Click the Browser Extension icon in your browser.
  2. Find the application that you want to launch.

    You can use the drop-down menu to filter apps (for example, recently or frequently used) or you can use the search field.

  3. Click the application name in the list.

Change where apps are launched

You can choose to launch applications from the Browser Extension in the current tab or in a new tab.

  1. Click the Browser Extension icon in your browser.

    The Browser Extension menu opens to the Applications tab.

  2. Select Open apps in a new browser tab to launch apps in a new tab.

Generate strong passwords with the CyberArk Identity Password Generator

Some of your business applications require you to sign up using credentials that are different than your corporate credentials. Instead of reusing a weak password so you can remember it, you can use the Password Generator to generate a strong, random password and use it during the business application sign up process or when you need to change the password. The Browser Extension can then automatically save your credentials (if Land & Catch is enabled) so you can launch the application from the CyberArk Identity User Portal or Browser Extension with one click. This reduces security threats and simplifies your sign up and sign in experience.

The CyberArk Identity Password Generator is available on the Browser Extension version 21.7 or later. Contact your system administrator for an updated Browser Extension if you don't see the Password Generator.

To generate passwords with the CyberArk Identity Password Generator

You can access the CyberArk Identity Password Generator from the Browser Extension or from a context menu when you right-click in a text input field of an application sign in page. For the context menu method, you do not need to be logged into the Browser Extension.

  1. Verify that you are signed in to the Browser Extension.

  2. Click the Browser Extension, then click the Password Generator icon.

    The Password Generator displays.

  3. Change the options as needed to comply with your business application's password requirements.

    If your password doesn't comply on the first attempt, you can change the settings and click Re-Generate Password to create a new password based on the updated settings.

  4. Click Copy Password to save the password to your clipboard, then use it in your application.

  1. In the application sign in page, right-click inside one of the text input fields for user name or password.

  2. Click the Password Generator icon.

    The Password Generator displays.

  3. Change the options as needed to comply with your business application's password requirements.

    If your password doesn't comply on the first attempt, you can change the settings and click Re-Generate Password to create a new password based on the updated settings.

  4. Click Copy Password to save the password to your clipboard, then use it in your application.

 

Troubleshoot the Browser Extension

The first thing to do if you have challenges using the Browser Extension is verify that you are signed in.

Refer to the following sections for more specific challenges and solutions.

Land & Catch - added applications are not available

Solution: Refresh the app cache

Your system administrator might have changed the applications deployed to you or the tags used to organize them. You can refresh your app cache to update the Browser Extension with the latest information.

  1. Click the Browser Extension icon in your browser.

    The Browser Extension menu opens to the Applications tab.

  2. Click the refresh icon to the left of the applications filter drop-down menu.

Land & Catch - The Browser Extension doesn't offer to add a new app

Solution: Clear the list of skipped sites

If you clicked Never at any of the prompts to add a site to your User Portal but later change your mind, you can clear the list of skipped sites by clicking the Browser Extension icon in your browser, then selecting Clear Skipped Sites... .

You can't sign in

Solution: Change your Portal Hostname

The portal hostname does not typically have to change from its default value; however, if your company uses multiple tenants, your system administrator might request that you change the portal hostname to an appropriate value for your tenant.

  1. Click the Browser Extension icon in your browser, then click the gear icon to go to the Settings tab.
  2. Expand Advanced, then enter the name of your tenant in the Portal Hostname field.

    The portal hostname typically takes the format <tenant>.Idaptive.com. You will see a red X in the field for invalid hostnames, and a green checkmark after entering a valid hostname.

Your system administrator wants the Browser Extension diagnostics log

Solution: Export the diagnostics log

Your system administrator might need you to export the Browser Extension diagnostics log to assist in troubleshooting.

  1. Click the Browser Extension icon in your browser, then click the gear icon to go to the Settings tab.
  2. Expand Advanced, the then click Export Diagnostics Log.

    If requested by your administrator, select Enable diagnostics log. Enabling this setting adds more detail to the diagnostics log. even with this setting disabled, diagnostic logs containing less detail are still available for export.

    The log is downloaded to your browser's default download location. The filename takes the format BElog-YYYYMMDD-HHMMSS.bin.

The Browser Extension doesn't autofill my credentials

If you are signed in to the CyberArk Identity Browser Extension and you already refreshed your app cache, the Browser Extension might conflict with your browser's features to save and autofill sign in credentials and other information.

Solution: Disable browser password prompts and autofill

Disable password prompts in Chrome

In order suppress the prompt to save passwords in your Chrome browser, select Disable Browser Password Prompts in the CyberArk Identity Browser Extension. When this option is selected, the Chrome privacy permission, Change your privacy related settings, is enabled in Chrome Extensions. This permission is required in order for the Browser Extension to suppress the prompt to save passwords in Chrome.

  1. Click the Browser Extension icon in your browser.
  2. Click the gear icon (Settings) and select Disable Browser Password Prompts.

  3. If the following message is displayed, click Allow.

Disable or enable autofill in Chrome

https://support.google.com/chrome/answer/142893