New research: SaaS attacks that avoid EDR and network monitoring | Read more →

Ready to help

Managed deployment using an MDM on macOS


Deploy the Push browser extension in Google Chrome, Microsoft Edge, Firefox, or Brave on macOS using a mobile device management (MDM) solution.

Push provides a standard config that can be imported and deployed via any MDM solution that supports provisioning custom configuration profiles to macOS endpoints. The directions below are not specific to a particular MDM. You should consult the documentation of your MDM solution to determine the best way to deploy the profile.

Here are a few popular MDM solutions and their instructions on deploying custom configuration profiles for macOS:

Generate the configuration profile

Before configuring your MDM, we need to generate a config file in the Push admin console. Skip to the next step if you've already done so.

1. In the Push admin console, head to the Browsers page, and click on Enrollment options.

Push app browser enrollment options: KB 10052/3/4/5/6/8
Access browser enrollment options via the Browsers section.

2. Select a Managed enrollment.

Managed browser enrollment screen - docs - showing Firefox

3. Click on Device Management Software, then choose Chrome, Edge, Firefox, or Brave as the browser and macOS as the OS. Then select Generate config. This will allow you to download a config file specific to your team.

Push app - Device Management selection Chrome MacOS: KB 10056
Generate the config profile for your team.

4. Download and extract the zip file.

Configure your MDM

1. In your MDM, create a custom configuration profile and provide a name and description.

2. Provide the config file included in the zip file from the previous step:

  • chrome_push_security.mobileconfig

  • edge_push_security.mobileconfig

  • firefox_push_security.mobileconfig

  • brave_push_security.mobileconfig

MDM Custom configuration profile: KB 10056
Create a custom configuration profile and attach the generated config.

3. Once the profile has been created, assign it to a device or group of devices.

When the settings propagate, the Push browser extension will be installed on devices in your organization and automatically enrolled in Push.