Skip to main content

Manage Cyberhaven Safari Extension via Declarative Device Management (DDM)

Starting with macOS Sequoia, Apple allows admins to enable or disable Safari App Extensions (such as CyberhavenSafariExtension) via Declarative Device Management (DDM). This impacts all Safari extensions, not just Cyberhaven.

Notes

  • Deploying this DDM policy is optional.
  • This feature is not supported by macOS versions before Sequoia. Check if your MDM can selectively target Sequoia hosts.
  • This declaration is not included in the Cyberhaven MDM profile available in your Console; configure it in your MDM.

Example (SimpleMDM)​

For MDMs that support DDM and expose a Safari Extension Settings UI:

  1. Go to Configs > Profiles > Create Profile.
  2. Select Safari Extension Settings.
  3. Under General, enter a profile name.
  4. Enter the bundle identifier and Team ID:
    • Bundle ID: io.cyberhaven.lightbeam.CyberhavenSafariExtension.Extension
    • Team ID: 6KKW3K37TU
  5. Set State: Always On.
  6. Set Private Browsing: Allowed.
  7. Save and assign to target macOS Sequoia devices.

This configuration manages the extension state so that users cannot disable the Cyberhaven Safari extension.