BFE Agent Extension

BFE Agent is an Edge/Chrome browser extension required for NFC + PIN Login. It automates the login process after a user badge and PIN are verified.

This page contains information to install the extension via Admin Chrome or GPO. Hosting the extension is required for both options.

Step 1: Hosting Extension Update file

The update.xml file is required for distributing the extension in Chrome or Edge.

1. Create update.xml file pointing to the target extension version.

   1. Extension ID and CRX file URL will be provided by BlueFletch.

<?xml version='1.0' encoding='UTF-8'?>
<gupdate xmlns='http://www.google.com/update2/response' protocol='2.0'>
  <app appid='<EXTENSION-ID>'>
    <updatecheck codebase='<CRX-FILE-PATH>' version='1.1' />
  </app>
</gupdate>

1. Host the update.xml file.

Step 2: Distribution

Distribute Chrome Extension via Admin Console

1. Go to https://admin.google.com/

2. Navigate to Devices > Chrome > Apps & extensions > Users & browsers.

3. Select the organizational unit (OU) you want to target.

4. Tap "+" to add an extension.

5. Specify the extension ID and update/install URL and make sure to set it to force-install.

   1. Use the extensionId provided by BlueFletch and updatedURL you are hosting.

   2. This will cause the extension to be automatically installed and the user cannot remove.

Distribute Edge Extension via Group Policies

The following steps outline how to use GPO for force installation.

1. Open Group Policy Management Editor: On your domain controller, open the Group Policy Management tool or the local Group Policy Editor.

2. Navigate to the Extensions Policy: Go to Computer Configuration > Policies > Administrative Templates > Microsoft Edge > Extensions.

3. Enable the Force-Install Policy: Open the policy setting named Control which extensions are installed silently (registry key: ExtensionInstallForcelist).

4. Add Extension Details:

   • Select Enabled.

   • Click the Show button to open the list of extensions.

   • In the list, enter the extension ID and the updatedURL in the format: extensionID;updateURL.

     • Use the extensionId provided by BlueFletch and updatedURL you are hosting.

   • Example: dcammpemjaodphbdhpcmlfhbgkhagalj;https://edge.company.cloudapp.azure.com/cases/extension/updates.xml

5. Apply the Policy: Click OK and then Apply. The policy will be applied to target devices, and the extension should install automatically the next time Edge is opened (after policies are refreshed).

Force Installation Edge Extension via Microsoft Intune

Alternatively, if you are using Microsoft Intune for device management, you can configure the policy there:

1. In the Microsoft Intune admin center, navigate to Devices > Scripts or Configuration profiles.

2. Create a new configuration profile for Windows 10 or later.

3. Add the Control which extensions are installed silently setting under the Microsoft Edge > Extensions category and specify the extension ID and update URL string as described above.

Verify Extension Installation

• Confirm that the BFE Agent extension appears in the corresponding browser:

  • Edge: edge://extensions

  • Chrome: chrome://extensions/