# Cakewalk Browser Extension ### πŸ”Ž What Does It Do? The browser extension automatically detects which SaaS apps your users are signing into from their browsers and reports this back to Cakewalk. This enables: * **App Discovery:** Uncover every app used across the company, including unmanaged and unapproved ones. * **Access Visibility:** Identify which users have access to which apps and when they last accessed them. * **Security Insights:** Detect risky or unsanctioned apps, duplicate accounts and orphaned access. * **Governance Automation:** Link discovered accounts to users and trigger onboarding/offboarding or review workflows. *** ### βš™οΈ How Does It Work? The extension runs passively in the background and detects when users visit **URLs that are only accessible after login** for supported SaaS applications. This allows Cakewalk to identify that a user has access to an app, without ever capturing passwords or session data. * It detects access to supported apps. * It maps those events to users in Cakewalk. * It syncs this data securely to your organization’s Cakewalk environment. * Admins and App Owners can then see which apps are being accessed, when they were last accessed and by whom. πŸ’‘ *The extension never reads, stores or transmits personal data, passwords or session tokens.* {% hint style="info" %} **How the browser extension records access:** The browser extension records current access that users already have, which is added directly to Cakewalk without going through the Access Request process. Access Requests are for new access that users want to have. Use the **Source** column in each app's User table to distinguish between access granted through requests versus discovered by the browser extension. {% endhint %} *** ### πŸ“š Which Apps Are Supported? Cakewalk’s browser extension recognizes and maps 6,000 apps, covering: * **Major business apps:** Google Workspace, Slack, Notion, HubSpot, Figma, Salesforce, etc. * **Common developer and cloud platforms**: AWS, GCP, Azure, Linear, GitHub, etc. * **AI apps and agents:** ChatGPT, Claude, Lovable, Cursor, ElevenLabs, etc. Supported apps are continually updated as Cakewalk expands its app catalog. No configuration is required as the extension automatically syncs with the latest supported app list. *** ### πŸ› οΈ Configuration Options Admins can control how the extension operates across the organization: | Setting | Description | | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Enforce browser extension installation | Create a mandatory task for all users to install the Cakewalk browser extension. | | Manage browser notifications | When disabled, the browser extension automatically tracks all accesses. If enabled, the browser extension only tracks applications after employee confirms their access. | All settings can be managed under Settings β†’ Account β†’ *Browser Extension* in the Cakewalk Admin Panel. *** ### 🌍 Supported Platforms The Cakewalk Browser Extension works on: * **Google Chrome** (latest versions) * **Microsoft Edge** (Chromium-based) * **Mozilla Firefox** (latest versions) * All other **Chromium-based** browsers (Arc, Brave, Opera, etc.) *** ### πŸ”’ How Does It Keep My Data Safe? Cakewalk’s browser extension is designed with **privacy and security first**: * All App Discovery is performed locally on the user’s device. **No browsing history is collected or sent to Cakewalk**. * It only collects metadata about app access (domain, timestamp and user identity). * It does not capture or transmit content, credentials or cookies. * All data is encrypted in transit and at rest, following industry standards (TLS 1.2+ / AES-256). * Data is processed only within Cakewalk’s secure infrastructure. * If you wish to exclude an app from the browser extension, make sure to mark it as *Ignored* in the *App Governance* table. * **Optional user consent:** Admins can enable **browser notifications**. With this mode, users must explicitly approve each app or access detection before any data is sent to Cakewalk. πŸ’‘ Employees retain full transparency and control. They can always see which apps are tracked in their profile. {% hint style="info" %} Read our [Privacy Policy](https://www.getcakewalk.io/privacy-policy) for more information on how Cakewalk stewards your data. {% endhint %} *** ### πŸš€ How Can I Roll It Out? There are two main rollout methods: #### Roll Out via Cakewalk Tasks * Admins can assign β€œInstall Browser Extension” tasks to all users. * Each user receives a task in Cakewalk (and a Slack notification, if connected). * If the user is logged into Cakewalk, the extension auto-authenticates with their profile upon installation. #### Roll Out via MDM or Managed Browsers * Distribute the extension organization-wide using your Mobile Device Management (MDM) solution (e.g. Intune, Kandji, Jamf) or Managed Browsers (e.g. Google Workspace). * See rollout instructions for select platforms [below](#microsoft-intune). πŸ’‘ *Cakewalk automatically detects who has installed the extension and displays coverage metrics in the Admin Dashboard* {% tabs %} {% tab title="Microsoft Intune" %} **Google Chrome** **Extension link:**\ [Chrome Web Store – Cakewalk Browser Extension](https://chromewebstore.google.com/detail/cakewalk-browser-extensio/mmndpdobkmoodjjapihanaaddehhfcaj) **Extension ID:**\ `mmndpdobkmoodjjapihanaaddehhfcaj` **Update URL:**\ `https://clients2.google.com/service/update2/crx` **Deployment (Windows via Intune Settings Catalog)** 1. Go to [**Microsoft Intune admin center**](https://intune.microsoft.com/). 2. Navigate to **Devices β†’ Configuration profiles β†’ Create profile**. 3. Select **Platform: Windows 10 and later**, **Profile type: Settings catalog**. 4. Name the profile (e.g. *Cakewalk-Chrome*). 5. Add setting: * Search for **Google Chrome β†’ Extensions β†’ Configure the list of force-installed apps and extensions**. * Enable it. * Enter: ``` mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx ``` 6. Assign the profile to target groups. 7. Create and deploy. **Deployment (macOS via Intune Custom profile)** Upload a **.mobileconfig** with: ```xml ExtensionInstallForcelist mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx ``` **Domain:** `com.google.Chrome` *** **Microsoft Edge** **Extension link:**\ [Edge Add-ons – Cakewalk Browser Extension](https://microsoftedge.microsoft.com/addons/detail/cakewalk-browser-extensio/oldilaangbgeaagcpipiephobfhajmoh) **Extension ID:**\ `oldilaangbgeaagcpipiephobfhajmoh` **Update URL:**\ `https://edge.microsoft.com/extensionwebstorebase/v1/crx` **Deployment (Windows via Intune Settings Catalog)** 1. In Intune admin center, create a new **Windows 10 and later β†’ Settings catalog** profile. 2. Name the profile (e.g. *Cakewalk-Edge*). 3. Add setting: * Search for **Microsoft Edge β†’ Extensions β†’ Control which extensions are installed silently**. * Enable it. * Enter: ``` oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx ``` 4. Assign to target groups and deploy. **Deployment (macOS via Intune Custom profile)** Upload a **.mobileconfig** with: ```xml ExtensionInstallForcelist oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx ``` **Domain:** `com.microsoft.Edge` *** **Mozilla Firefox** **Extension link:**\ Direct download:\ `https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi` **Extension ID (from manifest.json):**\ `cakewalk_browser_extension_prod@getcakewalk.io` ⚠️ The `.xpi` must be served with MIME type: ``` application/x-xpinstall ``` **Deployment (Windows via Intune ADMX / Imported templates)** 1. Import the latest **Firefox ADMX & ADML** into Intune. 2. Create a new profile: **Windows 10 and later β†’ Templates β†’ Imported Administrative Templates (Preview)**. 3. Configure: * Navigate to **Mozilla β†’ Firefox β†’ Extensions β†’ ExtensionSettings**. * Set JSON: ```json { "cakewalk_browser_extension_prod@getcakewalk.io": { "installation_mode": "force_installed", "install_url": "https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi" } } ``` 4. Assign and deploy. **Deployment (macOS via Intune Custom profile)** Upload a **.mobileconfig** with: ```xml policies ExtensionSettings cakewalk_browser_extension_prod@getcakewalk.io installation_mode force_installed install_url https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi ``` **Domain:** `org.mozilla.firefox` *** βœ… Once deployed, the Cakewalk Browser Extension is silently installed and locked in **Chrome, Edge, and Firefox** for all scoped users and devices. {% endtab %} {% tab title="Jamf" %} **Google Chrome (Mac)** **Extension link:** [Chrome Web Store – Cakewalk Browser Extension](https://chromewebstore.google.com/detail/cakewalk-browser-extensio/mmndpdobkmoodjjapihanaaddehhfcaj) **Extension ID:** ``` mmndpdobkmoodjjapihanaaddehhfcaj ``` **Update URL:** ``` ``` **Configuration Profile (Jamf)** * **Domain:** `com.google.Chrome` * **Plist content:** ```xml "> ExtensionInstallForcelist mmndpdobkmoodjjapihanaaddehhfcaj; ``` *** **Microsoft Edge (Mac)** **Extension link:** [Edge Add-ons – Cakewalk Browser Extension](https://microsoftedge.microsoft.com/addons/detail/cakewalk-browser-extensio/oldilaangbgeaagcpipiephobfhajmoh) **Extension ID:** ``` oldilaangbgeaagcpipiephobfhajmoh ``` **Update URL:** ``` ``` **Configuration Profile (Jamf)** * **Domain:** `com.microsoft.Edge` * **Plist content:** ```xml "> ExtensionInstallForcelist oldilaangbgeaagcpipiephobfhajmoh; ``` *** **Mozilla Firefox (Mac)** **Extension link:** Direct XPI hosting (Cakewalk-managed): ``` ``` **Extension ID (from manifest.json):** ``` cakewalk_browser_extension_prod@getcakewalk.io ``` > ⚠️ Note: The .xpi must be served with MIME type application/x-xpinstall. > > Example for nginx: > > ``` > types { > application/x-xpinstall xpi; > } > ``` **Configuration Profile (Jamf)** * **Domain:** `org.mozilla.firefox` * **Plist content:** ```xml "> policies ExtensionSettings cakewalk-extension@getcakewalk.io installation_mode force_installed install_url ``` *** **Deployment Steps (Jamf Pro)** 1. In Jamf Pro, go to **Computers β†’ Configuration Profiles β†’ New** 2. Add a **Custom Settings** payload 3. Enter the correct **Domain**: * Chrome β†’ `com.google.Chrome` * Edge β†’ `com.microsoft.Edge` * Firefox β†’ `org.mozilla.firefox` 4. Upload the corresponding plist 5. Scope the profile to the target Macs *** βœ… Once deployed, the Cakewalk Browser Extension will be **silently installed and locked** in Chrome, Edge, and Firefox for all scoped users. {% endtab %} {% tab title="Google Workspace" %} **Extension details** * **Extension link:** [Chrome Web Store – Cakewalk Browser Extension](https://chromewebstore.google.com/detail/cakewalk-browser-extensio/mmndpdobkmoodjjapihanaaddehhfcaj) * **Extension ID:** `mmndpdobkmoodjjapihanaaddehhfcaj` * **Update URL:** `https://clients2.google.com/service/update2/crx` *** **Deployment steps (Google Workspace Admin Console)** 1. Log in to the Google Admin Console.\ You must use an account with **Super Admin** or **Chrome management** privileges. 2. In the left-hand menu, go to:\ **Devices β†’ Chrome β†’ Apps & extensions β†’ Users & browsers** 3. Select the **OU (Organizational Unit)** where you want to enforce the extension. * To enforce it org-wide, choose the top-level OU. * To target a subset of users, select a child OU. 4. At the bottom right, click the **+ (Add)** button β†’ **Add from Chrome Web Store**. 5. Search for **Cakewalk Browser Extension** or paste the ID:\ `mmndpdobkmoodjjapihanaaddehhfcaj` 6. Click **Select**. 7. Under **Installation policy**, choose **Force install**. * Optional: You can also select **Force install + pin to toolbar** if you want it always visible. 8. Click **Save** at the bottom right. *** **Verification** * Once deployed, the extension will automatically install the next time users sign in to Chrome with their managed Google Workspace account. * You can confirm enforcement in the Admin Console under:\ **Devices β†’ Chrome β†’ Apps & extensions β†’ Users & browsers β†’ \[OU]**. * On end-user devices, the extension should appear in `chrome://extensions/` with the note *Installed by enterprise policy*. {% endtab %} {% tab title="Kandji" %} **Google Chrome (Mac)** **Extension link:** [Chrome Web Store – Cakewalk Browser Extension](https://chromewebstore.google.com/detail/cakewalk-browser-extensio/mmndpdobkmoodjjapihanaaddehhfcaj) **Extension ID:** ``` mmndpdobkmoodjjapihanaaddehhfcaj ``` **Update URL:** ``` https://clients2.google.com/service/update2/crx ``` **Configuration Profile (Kandji)** 1. In Kandji, go to **Library β†’ Add New β†’ Custom Profile** 2. Name the profile (e.g. *Cakewalk Chrome Extension*) 3. **Domain:** `com.google.Chrome` 4. **Plist content:** ```xml ExtensionInstallForcelist mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx ``` 5. Assign the profile to target devices or blueprints 6. Save and deploy *** **Microsoft Edge (Mac)** **Extension link:** [Edge Add-ons – Cakewalk Browser Extension](https://microsoftedge.microsoft.com/addons/detail/cakewalk-browser-extensio/oldilaangbgeaagcpipiephobfhajmoh) **Extension ID:** ``` oldilaangbgeaagcpipiephobfhajmoh ``` **Update URL:** ``` https://edge.microsoft.com/extensionwebstorebase/v1/crx ``` **Configuration Profile (Kandji)** 1. In Kandji, go to **Library β†’ Add New β†’ Custom Profile** 2. Name the profile (e.g. *Cakewalk Edge Extension*) 3. **Domain:** `com.microsoft.Edge` 4. **Plist content:** ```xml ExtensionInstallForcelist oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx ``` 5. Assign the profile to target devices or blueprints 6. Save and deploy *** **Mozilla Firefox (Mac)** **Extension link:** Direct XPI hosting (Cakewalk-managed): ``` https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi ``` **Extension ID (from manifest.json):** ``` cakewalk_browser_extension_prod@getcakewalk.io ``` ⚠️ **Note:** The .xpi must be served with MIME type `application/x-xpinstall`. **Configuration Profile (Kandji)** 1. In Kandji, go to **Library β†’ Add New β†’ Custom Profile** 2. Name the profile (e.g. *Cakewalk Firefox Extension*) 3. **Domain:** `org.mozilla.firefox` 4. **Plist content:** ```xml ExtensionSettings cakewalk_browser_extension_prod@getcakewalk.io installation_mode force_installed install_url https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi ``` 5. Assign the profile to target devices or blueprints 6. Save and deploy *** βœ… Once deployed, the Cakewalk Browser Extension will be **silently installed and locked** in Chrome, Edge, and Firefox for all scoped devices. {% endtab %} {% tab title="Mosyle" %} **Google Chrome (Mac)** **Extension link:** [Chrome Web Store – Cakewalk Browser Extension](https://chromewebstore.google.com/detail/cakewalk-browser-extensio/mmndpdobkmoodjjapihanaaddehhfcaj) **Extension ID:** ``` mmndpdobkmoodjjapihanaaddehhfcaj ``` **Update URL:** ``` https://clients2.google.com/service/update2/crx ``` **Deployment (Mosyle)** 1. Log in to Mosyle Business or Manager 2. Go to **Profiles β†’ Custom Profiles β†’ Add Profile** 3. Name the profile (e.g. *Cakewalk Chrome Extension*) 4. Upload a **.mobileconfig** file with the following content: ```xml PayloadTypeConfiguration PayloadVersion1 PayloadIdentifiercom.cakewalk.chrome PayloadUUIDGENERATE-UUID-HERE PayloadDisplayNameCakewalk Chrome Extension PayloadContent PayloadTypecom.apple.ManagedClient.preferences PayloadVersion1 PayloadIdentifiercom.cakewalk.chrome.extension PayloadUUIDGENERATE-UUID-HERE PayloadDisplayNameCustom: (com.google.Chrome) PayloadContent com.google.Chrome Forced mcx_preference_settings ExtensionInstallForcelist mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx ``` 5. Assign to target devices or groups 6. Deploy *** **Microsoft Edge (Mac)** **Extension link:** [Edge Add-ons – Cakewalk Browser Extension](https://microsoftedge.microsoft.com/addons/detail/cakewalk-browser-extensio/oldilaangbgeaagcpipiephobfhajmoh) **Extension ID:** ``` oldilaangbgeaagcpipiephobfhajmoh ``` **Update URL:** ``` https://edge.microsoft.com/extensionwebstorebase/v1/crx ``` **Deployment (Mosyle)** 1. Go to **Profiles β†’ Custom Profiles β†’ Add Profile** 2. Name the profile (e.g. *Cakewalk Edge Extension*) 3. Upload a **.mobileconfig** file with the following content: ```xml PayloadTypeConfiguration PayloadVersion1 PayloadIdentifiercom.cakewalk.edge PayloadUUIDGENERATE-UUID-HERE PayloadDisplayNameCakewalk Edge Extension PayloadContent PayloadTypecom.apple.ManagedClient.preferences PayloadVersion1 PayloadIdentifiercom.cakewalk.edge.extension PayloadUUIDGENERATE-UUID-HERE PayloadDisplayNameCustom: (com.microsoft.Edge) PayloadContent com.microsoft.Edge Forced mcx_preference_settings ExtensionInstallForcelist oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx ``` 4. Assign to target devices or groups 5. Deploy *** **Mozilla Firefox (Mac)** **Extension link:** Direct XPI hosting (Cakewalk-managed): ``` https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi ``` **Extension ID (from manifest.json):** ``` cakewalk_browser_extension_prod@getcakewalk.io ``` ⚠️ **Note:** The .xpi must be served with MIME type `application/x-xpinstall`. **Deployment (Mosyle)** 1. Go to **Profiles β†’ Custom Profiles β†’ Add Profile** 2. Name the profile (e.g. *Cakewalk Firefox Extension*) 3. Upload a **.mobileconfig** file with the following content: ```xml PayloadTypeConfiguration PayloadVersion1 PayloadIdentifiercom.cakewalk.firefox PayloadUUIDGENERATE-UUID-HERE PayloadDisplayNameCakewalk Firefox Extension PayloadContent PayloadTypecom.apple.ManagedClient.preferences PayloadVersion1 PayloadIdentifiercom.cakewalk.firefox.extension PayloadUUIDGENERATE-UUID-HERE PayloadDisplayNameCustom: (org.mozilla.firefox) PayloadContent org.mozilla.firefox Forced mcx_preference_settings ExtensionSettings cakewalk_browser_extension_prod@getcakewalk.io installation_modeforce_installed install_urlhttps://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi ``` 4. Assign to target devices or groups 5. Deploy *** βœ… Once deployed, the Cakewalk Browser Extension will be **silently installed and locked** in Chrome, Edge, and Firefox for all scoped devices. πŸ’‘ **Note:** Remember to generate unique UUIDs for each PayloadUUID field in the .mobileconfig files. You can use `uuidgen` command in Terminal or an online UUID generator. {% endtab %} {% endtabs %} --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.getcakewalk.io/connections-and-integrations/cakewalk-browser-extension.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.