Please make sure that you have the windows machine enrolled in Intune and You have integrated Microsoft Intune with Zluri.
Please ensure that you have logged in the browser for the auto- auth to happen.
Please download the respective files from the links below.
Adding the intunewin file to MS Intune.
This doc applies to all 3 browser agents:
Chrome
Edge
Firefox
Note: In this doc, we’ve taken chrome.intunewin as example, only the file to be uploaded will change and rest of the steps are as is.
For edge, make sure to upload edge.intunewin
For Firefox, make sure to upload Firefox.intunewin
Step 1:
Click on Apps on the sidebar in order to add the application
Go to All Apps and click on Add. After clicking on the add button you will get to see the Select app type blade at the right side of the screen.
Step 2:
From the Select App blade choose the Windows app(Win 32) from the drop-down menu
click on the Select button at the bottom of the blade.
Step 3:
Then Click on Select App package file
Under the App information tab, Click on the upload button and upload the chrome intunewin file.
Click on OK
Step 4:Under App information tab
Fill in all the mandatory fields like Name, and Description with what you can remember.
Click on Next
Step 5:Under the Program tab
Make sure msiexec.exe /i zluriautoauth.intunwin /qn is present
In the Install Command field append /L*v “C:\zluri[browsername].log” ORG_TOKEN=<enter your orgtoken > MDMMACTYPE=microsoftintune
In the above command enter your org token without <>
In the Device restart behavior field choose No specific action from the drop-down menu.
Click on Next.
Step 6:Under the Requirements tab
Choose 32-bit and 64-bit as the Operating System architecture
Choose the minimum operating system available from the dropdown in the Minimum operating system field.
Click on Next
Step 7:Under Detection rules
In Rules format field Select Manually configure detection rules
Below “type “ field there is Add button, click on Add button
Step 8:Under the Detection rule pane
Under the pane select all the required fields
In the Rule type field select File from the drop-down menu
Chrome
In the Path field enter C:\ProgramData\ConfigZluriBE
In File or folder field BEConfig.ini
Firefox
In the Path field enter C:\ProgramData\FirefoxConfig
In File or folder field FirefoxConfig.ini
Edge
In the Path field enter C:\ProgramData\EdgeConfig
In File or folder field EdgeConfig.ini
Choose the Detection method as File or folder exists from the drop-down menu.
Click on OK
NOTE: In the screenshot, you’ll see ConfigZluri & AppConfig.INI but replace with the above mentioned directory name & .INI file for respective browser MSI instance
Step 9: Under Dependencies rules
Click on Next
Note: While Installing Browser Extension Intunewin, just click next to skip the Dependency tab as we don’t need it.
Step 10:Click Next for the Supersedence tab
Step 10:Under the Assignments tab
In the Required field -Click on “Add all users” and “Add all devices”
If there are any grouped enrolled devices click on “Add all users” and “add all devices” in the Available for enrolled devices field.
Step 11:Click on review and create
Now that the App is configured in MSIntune, it will install the .MSIs and do the following tasks:
The [browsername].intunewin file will install the zluri web extension for respective browser
2. It will take the parameters passed, ORG_TOKEN & MDMMACTYPE and write it to the .INI file in the designated directory:
Chrome: C:\ProgramData\ConfigBE\*.ini
Edge: C:\ProgramData\EdgeConfig\*.ini
Firefox: C:\ProgramData\FirefoxConfig\*.ini
3. Then, the .intunewin will read the .ini file for ORG_TOKEN & MDMMACTYPE and fetch the system's serial number and pass all the parameters to the static page and save it.
4. After that, when the user opens the browser whenever, the zluri web extension will fetch the uuid/serial number, org_token, & mdm type from the static page and use it to auto authenticate you in zluri web extension context and close the zluri web extension tab
After silent installation and authentication user has to enable the extension in his Chrome / Firefox profile. This is a security requirement from the browsers and can not be passed.
In Edge also you will get a similar pop up where the user need to turn on the agent.
