Microsoft Intune

How to connect Corma to your Microsoft tenant account

This article covers the process to auto-install the Corma Launcher extension on the Chrome & Edge web browser on a Window computer using Microsoft Intune, which involves:

• Pushing an administrative template to end-user devices (steps 1-3).

• Validating that the installation was successful (Step 4).

The installation process doesn’t identify the visitors (end-users) or include metadata about them. Pair this installation with a follow-up configuration to identify visitors to Corma.

For complete documentation on using Intune to push administrative templates, see Microsoft's article: Using the settings catalog.

Prerequisites

This installation method isn't compatible with the Google Admin console method of extension installation, even for other non-Corma extensions. If you already use Google Admin console for managing Chrome extensions, you must use that method for the Corma Launcher as well.

Before you continue, we recommend that you communicate efficiently with your teams on the Corma app. You can use our one pager communication document for this purpose.

Find below the detailed steps for the following prerequisites:

• Create a configuration profile

• Configure your new profile

• Complete the profile creation workflow

• Validate the installation

1. Create a configuration profile

   1. Sign in to the Microsoft Intune admin center

   2. Navigate to Devices > Configuration Profiles

   3. Select + Create profile above the Search bar

      

   4. In the settings for your new profile, select Windows 10 and later as the platform and Settings Catalog as the Profile type.

   5. Select Create in the bottom-left corner of the form

      

   6. In the Basics tab, enter a meaningful name and (optionally) a description.

   7. Select Next to open the Configuration settings

2. Configure your new profile

   1. In the Configuration settings tab, select + Add settings. This opens a settings pane.

   2. Configure the extensions (both can be done at the same time in the same policy.

   For chrome extension:

   1. Navigate to Google > Google Chrome > Extensions and select Configure the list of force-installed apps and extensions.

      

   2. Close the settings pane.

   3. Use the toggle to enable your newly added setting.

      

   4. Enter the following Corma Launcher extension ID into the input box (or your custom ID provided by Corma to replace text before the ; in the text link below):

      iolppafpkhfdepflackhngphhjkocjoa;https://clients2.google.com/service/update2/crx

   For Edge extension

   1. Navigate to Microsoft Edge > Extensions and select Control which extensions are installed silently.

      

   2. Close the settings pane

   3. Use the toggle to enable your newly added setting

      

   4. Enter the following Corma Launcher extension ID into the input box (or your custom ID provided by Corma to replace this ID below)

      olpgbphkganafbdmkdjddhpfhnjoapke

      Select Next to open the Scope tags tab.

      ⚠️ Chrome and Edge profiles need to be configured as 2 seperate profiles

3. Complete the profile creation workflow

   1. If your organization uses scope tags, adjust them in the Scope tags tab. For full documentation on scope tags, see Microsoft's article: Use role-based access control (RBAC) and scope tags for distributed IT.

   2. Select Next to continue to the Assignments tab.

   3. In the Assignments tab, add the required deployment users, devices, and groups. We recommend targeting the deployment to a single device that you can access and validate before rolling Corma out to larger employee groups.

   4. Select Next to continue to the Review + create tab.

   5. In the Review + create tab, confirm that the settings match what you expect from your prior inputs.

   6. Select Create.

      

4. Validate the installation

   Corma recommends gradual rollout of the installation, beginning with a device that you have physical access to. Once the configuration profile is pushed to a given device, confirm its presence to validate your deployment process, and then confirm that the extension is installed to validate the content of your configuration

   Confirm the presence of the configuration profile

   1. On your targeted Windows device, open the registry editor. To do this, in the search box on the taskbar, enter regedit, then select Registry Editor (Desktop app) from the results.

   2. Navigate to the registry key location:

      HKEY_LOCAL_MACHINE > SOFTWARE > Google > Chrome > ExtensionInstallForceList

   3. Check that there is a key with the following value:

      epnhoepnmfjdbjjfanpjklemanhkjgil;<https://clients2.google.com/service/update2/crx>

      

      Confirm the extension is force installed in the browser

      Once you've confirmed that the registry key is present, validate that the content is formatted correctly by checking that the browser correctly force-installs the extension.

      1. Open the Chrome app on a device that has the configuration profile present. If the app is already running, quit and re-open it.

      2. In your browser, navigate to the following page by copying and pasting the following exact text into your URL bar: chrome://extensions

      3. Find the Corma Launcher, listed under Extensions. If the Corma Launcher extension is present, then the configuration profile was deployed successfully.