Overview
The Apple Safari Extension Policy manages Safari extensions on Macs. Use it to:
turn on Swif Browser Security, Swif's Safari extension, for users on the assigned Macs
block Safari extensions you don't allow
This policy doesn't install other extensions. Apple's Safari extension settings only manage extensions whose app is already installed on the Mac. To add another extension, install its app first, for example from the App Store, or as a custom app in Swif.
Requirements
Item | Details |
Platform | macOS 15 or later, with the latest Safari |
Device ownership | Company-owned and BYOD |
Settings reference
Setting | What it does | Default |
Enable Swif Safari Extension | Turns Swif Browser Security on or off for users on the assigned Macs | On |
Block Extensions | Safari extensions users can't turn on, each as | Empty |
Enable Swif Safari Extension
Turns on Swif Browser Security, Swif's Safari extension, which helps you see which SaaS apps and AI services your users visit, block the ones you don't allow, and catch unapproved sign-ups.
Whether users need to approve the extension depends on how the Mac was enrolled:
Enrollment method | Result | User approval needed? |
Enrollment SSO | The extension is installed and approved automatically. | No |
Automated Device Enrollment (ADE) | The installer is installed, but the extension may not be installed or approved automatically. | Yes, if installed |
Regular Swif enrollment | The extension is installed. | Yes, in Safari |
BYOD (agent installer) | The extension is installed. | Yes, in Safari |
To approve it, users go to Safari > Settings > Extensions, select Swif Browser Security, turn it on, and grant the permissions it asks for.
Block Extensions
Each entry identifies one extension by its bundle ID and the developer's Team ID, in this format:
BundleID (TeamID)
For example: com.example.app.extension (ABCD1234).
Find an extension's bundle ID and Team ID. On a Mac with the extension installed, run:
pluginkit -mAvvv -p com.apple.Safari.web-extension
Each extension in the output shows its bundle ID, and its Path. To get the Team ID, run this with the extension's path:
codesign -dv "/path/to/Extension.appex" 2>&1 | grep TeamIdentifier
Blocked extensions are turned off, and users can't turn them on in Safari > Settings > Extensions.
Create the policy
In Swif, go to Device Management > Policies, then select Create new policy > Configure a Policy.
Select Apple Safari Extension Policy.
Keep Enable Swif Safari Extension on, to turn on Swif Browser Security.
Add any extensions to block to Block Extensions, as
BundleID (TeamID).Save the policy, and assign it to your Macs.
Example configurations
Example 1: Turn on Swif Browser Security
Setting | Value |
Enable Swif Safari Extension | On |
Example 2: Turn on Swif Browser Security, and block an extension
Setting | Value |
Enable Swif Safari Extension | On |
Block Extensions |
|
Verify the policy
On the Mac, go to System Settings > General > Device Management, and check that the Swif profile is installed.
In Safari, go to Safari > Settings > Extensions.
Swif Browser Security should be listed. If users need to approve it, it appears turned off until they turn it on.
Blocked extensions should be turned off, and can't be turned on.
In Swif, open the device, and confirm that the policy shows as applied.
Troubleshooting
Swif Browser Security isn't installed
Check that the Mac runs macOS 15 or later.
Check that the policy is assigned, with Enable Swif Safari Extension on.
On Macs enrolled with Automated Device Enrollment, the extension may not install automatically. Ask the user to install and approve it in Safari.
Swif Browser Security is installed, but turned off
The user needs to approve it. In Safari > Settings > Extensions, select Swif Browser Security, turn it on, and grant its permissions.
A blocked extension still works
Check the entry's format:
BundleID (TeamID), with a space before the parentheses.Check that the bundle ID is the extension's, not its app's. Use
pluginkit, as in Block Extensions.Check that the policy shows as applied on the Mac.
I want to install another Safari extension
This policy can't install it. Install the extension's app first, from the App Store, or as a custom app in Swif.