Silently install the Okta Browser Plugin for Chrome

Use this guide to silently install the Okta Browser Plugin on Chrome for your groups.

Start this procedure

Task 1: Install the Chrome GPO template:​

  1. Download the zip file:

    https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip

  2. Unpack the zip file to a directory (for example, C:\ChromePolicy).

Task 2: Configure a Group Policy:

  1. Launch the Group Policy Management Console.

    Note: If you are creating a new policy, perform step (b); if you have an existing policy to which you want to add the Chrome Plugin installation, skip ahead to step (c).

  2. Right-click the OU that contains the systems to which you want to apply the policy, click Create a GPO in this domain, and Link it here, and then name the policy accordingly (for example, Okta Chrome Plugin Installation).
  3. Right-click the policy and click Edit.
  4. Expand Local Computer Policy > Computer Configuration > Administrative Templates.
  5. Right-click Administrative Templates and select Add/Remove Templates.
  6. Click Add and navigate to:

    C:\directory_specified_above\policy_templates\windows\adm\en-US

  7. Choose chrome.adm.

    Google > Google Chrome folders appear under Administrative Templates or Classic Administrative Templates (depending on your version of Windows):

  8. Expand Local Computer Policy > Computer Configuration > Administrative Templates > Classic Administrative Templates (ADM) > Google > Google Chrome > Extensions.
  9. In the right pane, right-click Configure the list of force-installed apps and extensions and then click Edit.
  10. Click Enabled.
  11. Click Show.
  12. Enter the following in the value field, and then click OK:

    glnpjglilkicbckjpbgcfkogebgllemb;https://clients2.google.com/service/update2/crx

  13. Click OK, and then click OK again to close the policy configuration window.
  14. In the Group Policy Management console, right-click the newly-created policy and ensure that Link Enabled and Enforced are both selected.

Task 3: Test the policy

  1. ​On a computer that is joined to the domain and belongs to the OU to which the GPO applies, launch a command prompt.
  2. Enter gpupdate /force
  3. Enter gpresult /r and verify that the created policy is listed as an Applied Group Policy Object under Computer Settings.
    • If this does not appear, try running the above command again in 5 -10 minutes to rule out group policy replication delays across domain controllers.
    • If it still does not appear within 5 -10 minutes, review the previous steps to ensure that the policy is being applied and enforced and that the computer belongs to the OU to which the policy is applied.
  4. Launch Chrome and enter chrome://extensions in the address bar.

    The Okta Secure Web Authentication Plug-in appears.

Remove an Admin Template

  1. Launch the Group Policy Management Console.
  2. Right-click the policy and click Edit.
  3. Expand Local Computer Policy > Computer Configuration > Administrative Templates.
  4. Right-click Administrative Templates and select Add/Remove Templates.
  5. From the list that appears, select a template and click Remove.

For more information, see the Google article Install Chrome extensions via group policy or master_preferences