Deploying to Safari for iOS
Apple treats Safari extensions as applications with an extension add-on. While Keep Aware functions the same way in Safari as it does in other browsers, the deployment process is different - the application is distributed through the App Store, configured through managed app preferences, and the extension is force-enabled using Apple's Declarative Device Management (DDM) framework.
Keep Aware for Safari for iOS is in beta. The supported extension is published in the App Store, but forced and managed deployments relies on your MDM's support for Apple's Declarative Device Management (DDM) to apply managed extension settings for Safari.
Getting started
Before you begin, make sure you have access to an MDM platform such as Intune, Jamf Pro, or Iru. You will also need the ability to distribute App Store applications and configure managed app settings through your MDM.
Find your Keep Aware tenant key (ka_host) and start key (ka_start) by opening the Settings page, and selecting View tenant details for your organization.
Deploy the application
Safari extensions are packaged as applications and distributed through the App Store. To deploy Keep Aware for Safari, use your MDM to assign and distribute the app titled "Keep Aware" from the App Store to your managed devices.
The bundle identifier for this application is com.keepaware.ios.safari.
Configure tenant settings
Once the application is deployed, configure your tenant settings by delivering managed app preferences through your MDM. These settings connect the Keep Aware Safari extension to your organization's tenant.
Target the bundle identifier com.keepaware.ios.safari and configure the following keys:
The exact steps for configuring managed app settings vary by MDM platform. An example configuration profile is available for reference:
📁 Download Template:
Force-enable the Safari extension
To ensure the Keep Aware extension is always active on managed devices, use Apple's Declarative Device Management (DDM) framework. DDM is Apple's modern approach to device management where configurations are declared on the device and enforced automatically, rather than relying on periodic check-ins with the MDM server. Safari extension management requires DDM-capable MDM platforms.
Configure the following managed Safari extension settings in your MDM:
| Setting | Value |
|---|---|
| Managed Extension | com.keepaware.ios.safari.extension (6ALP76LCQK) |
| Allowed Domains | <all_urls> |
| Private Browsing | Always On |
| Overall State | Always On |
Where these settings are located varies by MDM platform. DDM-based Safari extension management is currently supported in Intune, Jamf Pro, and Iru (previously known as Kandji).
For more information on managing Safari extensions through DDM, see Apple's guide: Manage Safari extensions on iOS.
Verifying the deployment
As browser policy is synced, browsers will appear online in the Browsers page. While not required in most cases, restarting the browser will force a policy refresh.