When you are invited to Parallels Browser Isolation, you will receive an invitation email containing a license key, a link to Parallels Browser Isolation sign-in page, and instructions on activating the license key in Parallels My Account.

To sign in:

1. Sign in to Parallels My Account (https://my.parallels.com/login).

2. On the Home page, click the Register a License Key button. You might be prompted to enter business information if you do not yet have a business account.

3. In the License Key field, specify the license key you received in the invitation email. Provide an optional description of the key in the Display name field.

4. Click Register.

5. Click Dashboard on the top of the page.

6. On the Parallels Browser Isolation card, click Initial Configuration. You will be redirected to Parallels Browser Isolation

Next, you need to configure Parallels Browser Isolation.

To let users access applications, you need to add them to Parallels Browser Isolation.

Adding users

To add a user to Parallels Browser Isolation:

1. Navigate to the User Management category.

2. Select Users.

3. Click Add.

4. Specify the name of the user exactly as it is configured in the IdP.

5. Click Add.

Adding groups

To add a group to Parallels Browser Isolation:

1. Navigate to the User Management category.

2. Select Groups.

3. Click the Add button.

4. Specify the name of the group exactly as it is configured in the IdP.

5. Click Add to add the group to Parallels Browser Isolation.

Next, you need to add applications.

To start working with Parallels Browser Isolation, follow the steps below:

1. Sign in to Parallels My Account and register your license key.

2. Configure your IdP for working with Parallels Browser Isolation.

3. Configure Parallels Browser Isolation.

4. Add users.

5. Add applications.

6. Add policies.

Applications are resources that your users can access in Paralles Browser Isolation.

To add an application:

1. Navigate to the Application category.

2. Click the Add Application button.

3. Parallels Browser Isolation supports two types of applications:

   • Secure browser: An instance of secure browser. You can create several instances for different users and groups and configure different policies for them.

   • Web application: A standalone web application.

   Depending on the type of application you want to add, click either Add Secure Browser or Add Secure Web Application.

4. Configure the application settings:

   • Name: The name of the application.

   • (Optional) Description: The description of the application.

   • (Optional) Icon: The application icon.

   • Start URL: Depends on the type of application. For secure browser instances, this is the URL of the home page. For the web application, this is the URL of the application.

   • (Web applications only) Allowed domain: Additional domains that can be accessed from the application, for example, IdP login pages. You can add several domains simultaneously by clicking the Add from File button and selecting a .csv file with the list of domains.

   • Users: Users who can access the application.

   • Groups: User groups that can access this application.

   • (Optional) Apply policies: Policies that apply to the application.

5. Click Save.

6. Navigate to the card with the application that you want to publish and click the Publish Application switch.

Next, you need to add policies.

To configure Parallels Browser Isolation for the first time:

1. Read Cloud Solution Agreement, and if you agree to it, click Accept.

2. On the Configure Domain & IdP card, click IdP Configuration. The Configuration category will open.

3. In the Domain Configuration section, enter your organization's domain in the Domain field.

4. In the IdP Configuration section, do the following:

   • In the OpenID configuration URL field, specify the URL of the discovery document of your OpenID Connect provider.

   • In the Client ID field, specify your client ID for connecting to the identity provider. For Auth0, the format of the Client ID is https://<Domain_Name>/.well-known/openid-configuration.

   • In the Client secret field, specify the secret for connecting to the identity provider.

   • In the Username claim name field, specify the ID token that holds the username claim name:

     • For Entra ID, specify preferred_username

     • For Auth0, specify name

   • In the Group claim name field, specify the ID token that holds the group claim name.

   • Click the Test Configuration button to make sure that the specified settings are correct.

5. Click Save. The Overview category will open.

6. In the Users field, specify the email (UPN) of the user you want to add as an administrator and click Add. The email must be exactly the same as that used in your IdP. Do this multiple times if you want to add several users.

7. In the Groups field, specify the group you want to add as an administrator group and click Add. The group name must be exactly the same as that used in your IdP. Do this multiple times if you want to add several groups.

8. Click Save. The Overview category will open.

9. On the Access Admin Portal card, click Admin Sign In. You will be redirected to Parallels Browser Isolation Management Portal.

Follow one of the links below to learn how to configure your IdP:

Next, you need to .

Policies allow you to configure things like access to resources, blocked domains, user experience, and so on.

To add a policy:

1. Navigate to the Policies category.

2. Click Add.

3. Configure the general policy settings:

   • Name: The name of the policy.

   • (Optional) Description: The description of the policy.

4. Configure settings in the Profile section. This section allows you to create an isolation profile based on users, groups, locations, time zones, and so on.

   • (Optional) Users: Users affected by this policy. Find the user in the Users drop-down menu and click the Add button to the right. Added users will appear in the list below.

   • (Optional) Groups: User groups affected by this policy. Find the group in the Groups drop-down menu and click the Add button to the right. Added groups will appear in the list below.

   • (Optional) Active Hours: The time period when the policy will be active.

   • (Optional) Location: Locations where the users are affected by this policy. Find the location in the Country drop-down menu and the Add button to the right. Added locations will appear in the list below.

5. Configure settings in the Security controls section. This section allows you to configure specific use cases or features like preventing uploading or downloading, restricting printing, or blocking an URL.

   • (Optional) Policy features: Features that are restricted under the policy.

   • (Optional) End user experience: The indicator that shows that the application is running inside Parallels Browser Isolation.

   • (Optional) Restrict domains: The URLs that are blocked under the policy. Specify the domain you want to block in the Block domain field and click the Add button to the right. Added URLs will appear in the list below. You can add several domains simultaneously by clicking the Add from File button and selecting a .csv file with the list of domains.

6. Click Save.

7. To apply the policy to an application, navigate to the Applications category and edit the application accordingly. You can see the list of applications the policy is applied to in the Usage section of the policy settings.

Now your users can access all published resources using Parallels Web Client.