Enable the Safari extension on iOS devices

Starting with the Beyond Identity authenticator for iOS on v2.100, you can enable a Safari extension to make logging into Beyond Identity and SSO applications like OKTA or Entra/Azure more seamless. 

Important: This extension only works for web application logins using the Safari web browser

For iOS 18, please follow the following steps:

1. Open your Safari browser
2. Click the icon to open your Safari menu options
3. Click Manage Extensions
4. Toggle on the Beyond Identity Safari Extension
5. Open your System Settings
6. Go to Safari, open Extensions and click Beyond Identity
7. Under Permissions, click byndid.com and change the permission to Allow
8. Close the menu and authenticate using your Beyond Identity passkey with zero interruption. 

For iOS 16 & 17, please follow the following steps:

Please note: the PA does not support 17.5.1

1. Start by going to Settings > Safari on your iOS device.
2. Under Safari, tap the Default Browser App entry, and change the default browser to Safari. 
   1. Can’t find this entry? If you’re certain you don’t see this entry, then your default browser has already been set to Safari. Proceed to step 3.
3. Under Safari, scroll down and tap Extensions.
4. Under Extensions, tap Beyond Identity in the list.
5. Under Beyond Identity, toggle on Allow Extension.
6. (Optional) The Allow in Private Browsing toggle will appear. If you use private browsing to log into your work apps, you can tap to enable this extension for Private Browsing mode.
7. Scroll down to the Webpage Contents and Browsing History section. Tap byndid.com at the bottom of the screen to set it to Allow.

Tap Back to return to Webpage Contents and Browsing History. If you see other URLs for Beyond Identity products there, tap each additional URL to set it to Allow.

• What’s the difference between Ask and Allow?

1. Ask — Don’t ask me about logging in for the next 24 hours. After that, multiple prompts from the former authentication experience will return. 
2. Allow — From now on, you can log into Beyond Identity and SSO applications like OKTA or Entra/Azure without multiple prompts for passwords. 

You’re done! Now that your iOS device is set up, your future logins will use an unprompted authentication flow, giving you a quicker and seamless login experience into your work applications.
To try it out right away, open Safari and authenticate into the Beyond Identity Admin console or your SSO (Okta, Azure/Entra, etc.) for a seamless login experience.

Experiencing set-up issues? Check the suggested steps below:

• Ensure your default browser is set to Safari (see step 2).
• Ensure you’ve turned on the Beyond Identity extension (see steps 4 & 5).
• Ensure all URLs in your Webpage Contents and Browsing History section are set to Allow (see step 8).