Silently install the Okta Browser Plugin for Chrome

Use this guide to silently install the Okta Browser Plugin on Chrome for your groups.

Start this procedure

  1. Install the Chrome GPO template
  2. Configure a Group Policy
  3. Test the policy

Install the Chrome GPO template

  1. Download the zip file: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip
  2. Unpack the zip file to a directory (for example, C:\ChromePolicy).

Configure a Group Policy

  1. Launch the Group Policy Management Console.

    • To create a policy, right-click the OU that contains the systems to which you want to apply the policy, click Create a GPO in this domain, and Link it here, and then name the policy accordingly (for example, Okta Chrome Plugin Installation).

    • To add the Chrome Plugin installation to an existing policy, right-click the policy and click Edit.

  2. Expand Local Computer Policy > Computer Configuration > Administrative Templates.
  3. Right-click Administrative Templates and select Add/Remove Templates.
  4. Click Add and navigate to: C:\directory_specified_above\policy_templates\windows\adm\en-US
  5. Choose chrome.adm.

    Google > Google Chrome folders appear under Administrative Templates or Classic Administrative Templates (depending on your version of Windows):

  6. Expand Local Computer Policy > Computer Configuration > Administrative Templates > Classic Administrative Templates (ADM) > Google > Google Chrome > Extensions.
  7. In the right pane, right-click Configure the list of force-installed apps and extensions and then click Edit.
  8. Click Enabled.
  9. Click Show.

  10. Enter the following in the value field and click OK:

    Copy 
    glnpjglilkicbckjpbgcfkogebgllemb;https://clients2.google.com/service/update2/crx
  11. Click OK, and then click OK again to close the policy configuration window.
  12. In the Group Policy Management console, right-click the newly-created policy and ensure that Link Enabled and Enforced are both selected.

Test the policy

  1. On a computer that is joined to the domain and belongs to the OU to which the GPO applies, launch a command prompt.

  2. Enter

    gpupdate /force

  3. Enter

    gpresult /r

    Verify that the created policy is listed as an Applied Group Policy Object under Computer Settings.

    • If this does not appear, try running the above command again in 5 -10 minutes to rule out group policy replication delays across domain controllers.

    • If it still does not appear within 5 -10 minutes, review the previous steps to ensure that the policy is being applied and enforced and that the computer belongs to the OU to which the policy is applied.

  4. Launch Chrome and enter chrome://extensions in the address bar.

    The Okta Secure Web Authentication Plug-in appears.

Remove an Admin Template

  1. Launch the Group Policy Management Console.
  2. Right-click the policy and click Edit.
  3. Expand Local Computer Policy > Computer Configuration > Administrative Templates.
  4. Right-click Administrative Templates and select Add/Remove Templates.
  5. From the list that appears, select a template and click Remove.

For more information, see the Google article Install Chrome extensions via group policy or master_preferences