Silently install Okta Browser Plugin on Chrome

Use this guide to silently install the Okta Browser Plugin on Chrome for your groups.

See Chrome browser on Windows (managed on premise) for more information.

Install the Chrome GPO template

  1. Go to dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip to download the GPO template file.
  2. Unpack the zip file to a directory.

Configure a Group Policy

  1. Launch the Group Policy Management Console.
  2. Right-click the organizational unit (OU) that contains the systems where you want to apply the policy.
  3. Click Create a GPO in this domain, and Link it here.
  4. Enter a name for the policy.
  5. Right-click the policy and click Edit.
  6. Add the Chrome plugin installation to the policy.
  7. Expand Local Computer PolicyComputer ConfigurationAdministrative Templates.
  8. Right-click Administrative Templates, and then select Add/Remove Templates.
  9. Click Add, and then go to this location: C:\directory_specified_above\policy_templates\windows\adm\en-US.
  10. Select chrome.adm. The GoogleGoogle Chrome folders appear under Administrative Templates or Classic Administrative Templates, depending on your version of Windows:

  11. Expand Local Computer PolicyComputer ConfigurationAdministrative TemplatesClassic Administrative Templates (ADM)GoogleGoogle ChromeExtensions.
  12. In the right pane, right-click Configure the list of force-installed apps and extensions and then click Edit.
  13. Click Enabled.
  14. Click Show.
  15. Enter the following text in the value field, and then click OK:
    Copy
    glnpjglilkicbckjpbgcfkogebgllemb;https://clients2.google.com/service/update2/crx
  16. Click OK, and then click OK again to close the policy configuration window.
  17. In the Group Policy Management Console, right-click the new policy and ensure that Link Enabled and Enforced are both selected.

Test the policy

  1. On a domain computer that belongs to the OU where the GPO applies, enter the following command in a terminal or command prompt window: gpupdate /force
  2. Enter the following command: gpresult /r
  3. Verify that the policy appears under Computer SettingsApplied Group Policy Object. If it doesn't, verify that the computer belongs to the OU where the policy is applied. Otherwise, try again after several minutes in case the group policy replication hasn't finished.
  4. Open the Chrome browser, and then enter chrome://extensions in the address bar. The Okta Secure Web Authentication Plug-in appears.

Remove an Admin Template

  1. Open the Group Policy Management Console.
  2. Right-click the policy and then click Edit.
  3. Expand Local Computer PolicyComputer ConfigurationAdministrative Templates.
  4. Right-click Administrative Templates, and then select Add/Remove Templates.
  5. Select a template from the list, and then click Remove.