---
title: "Enrich Browser Extension"
slug: "enrich-browser-extension"
tags: ["ControlUp for Desktops"]
updated: 2026-10-27T12:55:32Z
published: 2026-10-27T12:55:32Z
canonical: "support.controlup.com/enrich-browser-extension"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.controlup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enrich Browser Extension

The Enrich browser extension shows ControlUp device data and actions inside the other web apps you work in, such as ServiceNow and Microsoft Intune. When Enrich finds a device or user from your ControlUp environment on the page, you can open a slide-in overlay to view real-time data and fix issues without leaving your current tab. You can also search for any device from the extension toolbar.

![The Enrich overlay open on a ServiceNow incident](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/EnrichExample.png)

From the Enrich overlay, you can:

- **Take action**: Run device actions, including custom scripts you've added to ControlUp, and end processes.
- **Connect to the device**: Start a Remote Control or Remote Shadow session, open a Remote Shell, or use the file browser and registry editor.
- **Diagnose issues**: View the top resource-consuming processes, network details (Wi-Fi signal strength, latency, and network usage), Windows Event Log entries, blue screen errors (BSODs), and application crashes.
- **Monitor performance**: View real-time and historical metrics such as CPU and RAM usage, and ControlUp Device Events such as alerts.
- **Check hardware**: View OS and hardware information and the device's storage drives.

## Before you begin

- Enrich supports **Microsoft Edge** and **Google Chrome** only.
- Enrich works with all device types that ControlUp supports, including Windows, macOS, Linux, and thin clients.
- The actions you can perform in Enrich depend on your ControlUp account permissions, because Enrich uses your ControlUp sign-in.
- To configure Enrich settings for your organization, you need the **Manage Sites** permission in the **Enrich** permission category. This permission controls access to all Enrich settings, not only supported sites.

## Install Enrich

Install the **ControlUp Enrich** extension from the [Microsoft Edge Add-ons store](https://microsoftedge.microsoft.com/addons/detail/controlup-enrich/jpnanfoohdfeigkhpljklbgccfbccafp) or the [Chrome Web Store](https://chrome.google.com/webstore/detail/controlup-enrich/hbhejhbegnlejblphomgobfbjgobjkmf).

If you want to deploy Enrich using a group policy, you can use these extension IDs and update URLs:

| Browser | Extension ID and update URL |
| --- | --- |
| Microsoft Edge | `jpnanfoohdfeigkhpljklbgccfbccafp;https://edge.microsoft.com/extensionwebstorebase/v1/crx` |
| Google Chrome | `hbhejhbegnlejblphomgobfbjgobjkmf;https://clients2.google.com/service/update2/crx` |

## Sign in

If you're already signed in to ControlUp in your browser, Enrich signs you in automatically.

To sign in or out manually, click the Enrich icon in your browser toolbar. To sign out, click your profile icon, then click **Sign out**.

SAML SSO

If your organization uses SAML, an admin can turn on **Sign in with SAML SSO** in the [Enrich settings](/docs/enrich-browser-extension#settings-reference) so that Enrich sends you straight to your SAML sign-in page.

## Use Enrich

You can open Enrich in two ways: from a device that Enrich detects on a web page, or by searching for a device from the browser toolbar.

### Open Enrich from a detected device

On supported sites, Enrich scans the page for devices and users from your ControlUp environment. When it finds a match, the Enrich icon appears on the right side of the page.

1. Click the Enrich icon on the page to open the overlay.
2. If Enrich found more than one device, use the dropdown at the top of the overlay to switch between them.
  - Under the device name, Enrich shows how it detected the device (for example, by serial number).

Admins choose which sites Enrich scans and how it identifies devices. For details, see [Configure Enrich](/docs/enrich-browser-extension#configure-enrich).

### Search for a device

You can search for any device in your ControlUp environment, whether or not it appears on the current page.

1. Click the Enrich icon in your browser toolbar.
2. On the **Search** tab, search by device name, serial number, UPN, or user display name. Search isn't case-sensitive.
3. Select a device from the results to open the overlay.

Note

Search doesn't work on internal browser pages, such as pages that start with `chrome://` or `edge://`, or a blank start page that has no URL.

Tip: Open the device in ControlUp

Click the external link icon next to a device's name to open that device's details page in ControlUp.

![The external link icon next to the device name in the Enrich overlay](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/DirectDeviceLink.png)

### Use the extension toolbar

Click the Enrich icon in your browser toolbar to open the extension popup. The banner at the top shows which ControlUp organization you're connected to. The popup has three tabs:

| Tab | What it does |
| --- | --- |
| **Search** | Search for any device in your ControlUp environment. |
| **Sites** | Lists your organization's supported sites and their element IDs. The site you're viewing is highlighted in blue. |
| **Sync** | Shows when Enrich last synced with ControlUp. Click **Sync now** to get the latest devices and settings. |

To change the order of the tabs, click and drag them. Enrich saves the tab order separately for each user.

## Configure Enrich

Admins can customize which sites Enrich scans, how it identifies devices, and how often it syncs. These settings apply to everyone in your organization.

If you don't turn on custom settings, Enrich uses its default configuration: it detects devices by device name and serial number only, on ServiceNow and Microsoft Intune (including `endpoint.microsoft.com`).

### Turn on custom settings

1. Sign in to ControlUp.
2. Go to **Settings** > **Enrich**.
3. Turn on **Enable**.

![The Enable toggle on the Enrich settings page](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/EnableEnrichSettings.png)

### Settings reference

| Setting | Description |
| --- | --- |
| **Refresh Interval** | How often Enrich syncs your managed devices, supported sites, and other settings. Options: 1, 3, 12, or 24 hours. Default: 1 hour. |
| **Sign in with SAML SSO** | Sends users straight to your SAML sign-in page instead of the standard ControlUp sign-in page. |
| **Device and User Detection Methods** | How Enrich identifies devices and users on a page: device name, serial number, UPN, or user display name. Enrich matches a serial number only if it's longer than 4 characters. |
| **Automatically log Enrich actions into ServiceNow work notes** | When a user performs an action in Enrich (such as starting Remote Control or running a script) while viewing a ServiceNow incident, Enrich adds the action to the incident's work notes. When you start a remote control or remote shadow session, the work notes record the consent request message displayed to the user, and whether the user agreed or disagreed to the consent request. |

### Add a supported site

ServiceNow and Microsoft Intune are included by default. To add another site:

1. Click **Add Site**.
2. Enter the site URL. You can use wildcards, for example `https://*.console.aws.amazon.com`.
3. If the device identifiers on the site are inside [iframes](https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/iframe), turn on **iframe Support**.
  - If you're not sure, add the site without iframe support first. Turn it on only if Enrich doesn't detect devices.
4. (Optional) To search only specific parts of the page, [limit the search to specific element IDs](/docs/enrich-browser-extension#limit-the-search-to-specific-element-ids).
5. Click **Add site**.

### Limit the search to specific element IDs

By default, Enrich searches the entire page. On busy pages, this can match devices you don't care about. Limiting the search to specific elements reduces unwanted matches and lowers the extension's impact on the browser.

Enrich can target elements only if they have an `id` attribute, for example `id="xyz"`. Other attributes, such as `class` or `name`, don't work.

To find and add an element ID:

1. Go to the site you're adding.
2. Right-click the element you want Enrich to search, and click **Inspect**.
3. Find the element's `id` attribute.

![An element's id attribute highlighted in the browser's developer tools](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/ElementWithId.png)
  - If the element has no `id` attribute, you can't use it to limit the search.
4. In the site settings, turn on **Limit search to specific element IDs**.
5. Enter the ID and click **Add**. For the example above, enter `sys_display.incident.caller_id`.
  - Repeat to add more IDs.

#### Element IDs for common apps

You can use these element IDs to narrow the search on common apps. These IDs can change when the app is updated.

| App | Element ID | Example |
| --- | --- | --- |
| IGEL UMS | `device-details-container-desktop` | ![The device details panel in IGEL UMS](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/IGEL%20UMS%20example.png) |

## Troubleshooting

### The Enrich icon doesn't appear on a page

1. **Check that the extension is on.** Make sure Enrich is installed and enabled in your browser.
2. **Check that the site is supported.** Open Enrich from your browser toolbar and go to the **Sites** tab. The current site should be highlighted in blue. If it isn't, check the site URL in your [Enrich settings](/docs/enrich-browser-extension#add-a-supported-site).
3. **Sync Enrich.** If you recently added a device to ControlUp or added a supported site, go to the **Sync** tab and click **Sync now**.
4. **Check the element IDs.** If the site uses **Limit search to specific element IDs**, go to the **Sites** tab and open **Element IDs**. A green ID means the element is on the page. It doesn't mean the element contains a matching device or user, so right-click the element and click **Inspect** to check its contents.

### Enrich doesn't detect a device or user

Enrich needs an exact match on the page for one of your organization's [detection methods](/docs/enrich-browser-extension#settings-reference).

- **Serial number**: Must be longer than 4 characters.
- **UPN**: Enrich compares against the `console_user_upn` field in the `_devices` data index.
- **User display name**: Enrich compares against the `console_user_display_name` field in the `_devices` data index.

To see what ControlUp has collected for a device, check these fields in the `_devices` data index and compare them to what's on the page.

### Enrich shows data from the wrong organization

Open Enrich from your browser toolbar and check the banner at the top. Make sure you're connected to the correct ControlUp organization.

### An action is missing or unavailable

The actions you can perform in Enrich depend on your ControlUp account permissions. Contact your ControlUp admin to check your permissions.