Silently install the Okta Browser Plugin for Chrome
Use this guide to silently install the Okta Browser Plugin on Chrome for your groups.
Start this procedure
Task 1: Install the Chrome GPO template:
- Download the zip file:
https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip
- Unpack the zip file to a directory (for example,
C:\ChromePolicy
).
Task 2: Configure a Group Policy:
- Launch the Group Policy Management Console.
Note: If you are creating a new policy, perform step (b); if you have an existing policy to which you want to add the Chrome Plugin installation, skip ahead to step (c).
- Right-click the OU that contains the systems to which you want to apply the policy, click Create a GPO in this domain, and Link it here, and then name the policy accordingly (for example, Okta Chrome Plugin Installation).
- Right-click the policy and click Edit.
- Expand Local Computer Policy > Computer Configuration > Administrative Templates.
- Right-click Administrative Templates and select Add/Remove Templates.
- Click Add and navigate to:
C:\directory_specified_above\policy_templates\windows\adm\en-US
- Choose chrome.adm.
Google > Google Chrome folders appear under Administrative Templates or Classic Administrative Templates (depending on your version of Windows):
- Expand Local Computer Policy > Computer Configuration > Administrative Templates > Classic Administrative Templates (ADM) > Google > Google Chrome > Extensions.
- In the right pane, right-click Configure the list of force-installed apps and extensions and then click Edit.
- Click Enabled.
- Click Show.
- Enter the following in the value field, and then click OK:
glnpjglilkicbckjpbgcfkogebgllemb;https://clients2.google.com/service/update2/crx
- Click OK, and then click OK again to close the policy configuration window.
- In the Group Policy Management console, right-click the newly-created policy and ensure that Link Enabled and Enforced are both selected.
Task 3: Test the policy
- On a computer that is joined to the domain and belongs to the OU to which the GPO applies, launch a command prompt.
- Enter
gpupdate /force
- Enter
gpresult /r
and verify that the created policy is listed as an Applied Group Policy Object under Computer Settings.- If this does not appear, try running the above command again in 5 -10 minutes to rule out group policy replication delays across domain controllers.
- If it still does not appear within 5 -10 minutes, review the previous steps to ensure that the policy is being applied and enforced and that the computer belongs to the OU to which the policy is applied.
- Launch Chrome and enter
chrome://extensions
in the address bar.The Okta Secure Web Authentication Plug-in appears.
Remove an Admin Template
- Launch the Group Policy Management Console.
- Right-click the policy and click Edit.
- Expand Local Computer Policy > Computer Configuration > Administrative Templates.
- Right-click Administrative Templates and select Add/Remove Templates.
- From the list that appears, select a template and click Remove.
For more information, see the Google article Install Chrome extensions via group policy or master_preferences