This walkthrough will help you get started with Extended Device Compliance, as well as test it within a smaller group before rolling it out to your organization.

Before You Begin

Before you can set up Extended Device Compliance, you’ll need:

• 1Password Business
• 1Password Device Trust Core or 1Password Device Trust Connect. Contact Kolide support to upgrade.
• The 1Password browser extension for Chrome 8.10.78-43 or later.
• A Chrome-based web browser (for example Google Chrome, Chromium, Microsoft Edge, Brave, or Arc)

If you haven’t set up Kolide yet

If you haven’t already, you’ll need to sign in to 1Password.com and create your Kolide tenant:

1. Sign in to your account on 1Password.com.
2. Select 1Password Admin Console in the top-left corner.
3. Choose Kolide. This creates your Kolide tenant.

Step 1: Create a Test Group

Before you roll it out to your entire team, you can test Extended Device Compliance with a limited number of people by only applying Extended Device Compliance to select 1Password groups. You’ll choose the 1Password groups you want to experience Extended Device Compliance, then turn on Extended Device Compliance for web apps you want to use for testing.

To select groups of people you want to test Extended Device Compliance:

1. Select your profile in the top-right corner of Kolide.
2. In the profile dropdown select Settings.
3. Select Extended Device Compliance in the sidebar.
4. In the section “Control Who Can Use this Feature”, choose Select groups of people.
5. In the Enable For Users In field, find and select the groups you want to apply Extended Device Compliance to.
   • (Optional) Find and select a group in the Unless They Are Also In The Following Groups field to exclude users who also belong to another group.
6. Select Submit.

You’ll now see the 1Password groups you chose to have Extended Device Compliance enabled for, and any you have chosen to exclude.

Step 2: Protect a web app with Extended Device Compliance

To add Extended Device Compliance to a web app:

1. Select the Apps tab in Kolide. You’ll see a list of web apps Kolide has discovered that your team members are using.
2. Choose an app that you want to protect with Extended Device Compliance.
3. Toggle on Extended Device Compliance.

Step 3: Configure Checks

In Kolide, create a Check or use an existing check that’s straightforward for end users to fix. Some examples include:

• Finder - Require File Extensions to be Visible in Finder (macOS)
• Windows Explorer - Require File Extensions to Be Visible (Windows)
• Terminal - Require Secure Keyboard Entry to be Enabled (macOS)

You’ll test Kolide by failing this check and fixing the issue.

If you’d like to test what it’s like to be blocked from a web app, choose a check that will Block Immediately.

If you want to add a check that blocks you:

1. Select the Checks tab.
2. Find and select the Check, preferably a Check that’s easy to fix.
3. Make sure the Check is turned on, then select the vertical ellipses and choose Configure.
4. If you made a device group for testing, in the “This Check Runs Against” field choose your device group and select Save.
5. In the “Remediation Strategy" section, select Configure.
6. Choose Block Immediately, then select Save.

After you have the Check you want to test, make sure your device is not in compliance with that Check. For example, if you have a Check that requires content caching to be turned off, you’ll turn content caching on.

When you’ve made sure your device is not in compliance, manually re-check your device:

1. Select the Checks tab.
2. Find the Check you’re using to test Extended Device Compliance and select it.
3. Find the device name you’re testing with and select it.
4. Select the Check Results tab.
5. Find the check and select it again.
6. Select Recheck Device Now, and you’ll see that your device is now failing the check.

Step 4: Test Extended Device Compliance

To test Extended Device Compliance, you’ll need your device to fail a Check.

Sign in to the web app you protected with Extended Device Compliance. You’ll see a 1Password notification in your browser listing any issues you need to fix before you can access the web app. You can select the issue in the notification to see instructions on how to fix the issue yourself.

Fix the issue and select Recheck in the 1Password notification. If you choose a check that allows you to snooze the notification, you’ll be able to select Snooze on this notification.

If you choose a check that blocks your device immediately, you won’t be able to sign in to the app until you fix the issue.