Silently install Okta Browser Plugin on Chrome

Use this guide to silently install the Okta Browser Plugin on Chrome for your groups.

Install the Chrome GPO template

  1. Download the zip file: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip
  2. Unpack the zip file to a directory (for example, C:\ChromePolicy).

Configure a Group Policy

  1. Launch the Group Policy Management Console.

    • Create a policy.

      1. Right-click the organizational unit (OU) containing the systems where you want to apply the policy.

      2. Click Create a GPO in this domain, and Link it here.

      3. Name the policy accordingly (for example, Okta Chrome Plugin Installation).

    • To add the Chrome plugin installation to an existing policy, right-click the policy and click Edit.

  2. Expand Local Computer PolicyComputer ConfigurationAdministrative Templates.
  3. Right-click Administrative Templates and then select Add/Remove Templates.
  4. Click Add and then go to this location: C:\directory_specified_above\policy_templates\windows\adm\en-US
  5. Choose chrome.adm.

    GoogleGoogle Chrome folders appear under Administrative Templates or Classic Administrative Templates (depending on your version of Windows):

  6. Expand Local Computer PolicyComputer ConfigurationAdministrative TemplatesClassic Administrative Templates (ADM)GoogleGoogle ChromeExtensions.
  7. In the right pane, right-click Configure the list of force-installed apps and extensions and then click Edit.
  8. Click Enabled.
  9. Click Show.

  10. Enter the following in the value field and then click OK:

    Copy 
    glnpjglilkicbckjpbgcfkogebgllemb;https://clients2.google.com/service/update2/crx
  11. Click OK, and then click OK again to close the policy configuration window.
  12. In the Group Policy Management Console, right-click the new policy and ensure that Link Enabled and Enforced are both selected.

Test the policy

  1. On a domain computer that belongs to the OU where the GPO applies, launch a command prompt.

  2. Type:

    gpupdate /force

  3. Then type:

    gpresult /r

    Confirm that the created policy is listed as an Applied Group Policy Object under Computer Settings.

    • If this result doesn't appear, try running the command again in 5 -10 minutes. This rules out any delays from group policy replication across domain controllers.

    • If this result still doesn't appear within 5 -10 minutes, review the previous steps to ensure that the following conditions are met:

      • The policy is being applied and enforced.

      • The computer belongs to the OU where the policy is applied.

  4. Launch Chrome and enter chrome://extensions in the address bar.

    The Okta Secure Web Authentication Plug-in appears.

For more information, see Chrome browser on Windows (managed on premise)

Remove an Admin Template

  1. Launch the Group Policy Management Console.
  2. Right-click the policy and the click Edit.
  3. Expand Local Computer PolicyComputer ConfigurationAdministrative Templates.
  4. Right-click Administrative Templates and then select Add/Remove Templates.
  5. From the list that appears, select a template and click Remove.