Skip to main content

XFA Web Extension

The XFA Web Extension is a browser-based tool that enhances security, ensures compliance, and provides seamless integration with the XFA service for managing device compliance and multi-factor authentication (MFA).

How to Obtain the Extension​

The XFA Web Extension is available for Chrome, Firefox & Edge major browsers. End-users can install the extension here.

Key Features of the Web Extension​

The XFA Web Extension offers the following capabilities:

  • View Device Checks: Access the compliance checks that apply to your device directly within the extension and communicatie with your browser during the login process.
  • Organization Overview: See a list of all organizations that have access to your device’s compliance status, ensuring transparency and control over your data.
  • MFA Trust Management: Use the extension to trust your browser for multi-factor authentication, enabling secure and seamless logins.
    XFA Web Extension

How to Trust Your Browser for MFA​

The XFA Web Extension supports multi-factor authentication by allowing users to trust their browser. Here’s how to set it up:

  1. Install the XFA Web Extension for your preferred browser.
  2. During login to an XFA-protected company application with a untrusted device, follow the prompts to trust your browser.
  3. Once trusted, your browser can be used as an MFA device, simplifying future authentication.

Example MFA Flow​

  1. Attempt to log into a company application with an XFA-protected device.
  2. The XFA Web Extension will prompt you to approve the authentication request.
  3. Approve the request within the extension to complete the login process securely.
XFA Web Extension

Data Collected​

The XFA Web Extension operates within the browser’s security sandbox, limiting its access to sensitive information. The collected data includes:

  • Browser type and version (e.g., Chrome 118, Firefox 120).
  • The version of the XFA Web Extension installed.
  • Device compliance status, including any failed checks.
note

Data is only shared with organizations when:

  • You actively log in to an XFA-protected application.
  • You approve an MFA request or view compliance checks within the extension.
  • Regularly via a background process.

Best Practices for Users​

Users are encouraged to:

  • Keep the Extension Updated: Ensure you are running the latest version of the XFA Web Extension to access the newest features and fixes.
  • Review Compliance Checks: Regularly open the extension to verify your device's compliance status and address any outstanding issues.
  • Monitor Shared Data: Use the extension to stay informed about which organizations have access to your compliance status.

By effectively using the XFA Web Extension, you can ensure secure authentication and maintain control over compliance and data sharing with your organizations.