Extension deployment via google workspace + MDM at device level

Collect Chrome Extension URL & ID From chrome web store or copy from here:

1. Copy Extension URL - https://chromewebstore.google.com/detail/swift-security-extension/caagpeigabceamfbclichjenfkcnekha

2. Copy the ID of the Browser Extension - caagpeigabceamfbclichjenfkcnekha

Google managed Device enrolment (via google workspace)

You need to set-up an MDM tool (like Kandji, jamf) where you can add multiple Devices of the organization and have to configure Chrome Browser Cloud Management Enrollment token policy to the devices which are added in Kandji.

Generate Google Chrome Cloud Management enrolment token

In the Google Admin console,

1. go to Menu and then Devices > Chrome > Managed browsers. If you signed up for Chrome Browser Cloud Management, go to Menu > Chrome browser > Managed browsers.

2. (Optional) On the left, select the top-level organization. Or, select the organizational unit where you want to generate a token that will enroll browsers directly to that specific organizational unit.

3. At the top, click Enroll. Note: If this is your first browser enrollment, you are prompted to accept the Chrome Browser Cloud Management Terms of Service.

4. Click Copy enrollment token to clipboard .

5. Click Done.

You can also follow generate an enrolment token for more information.

This token will be used in the chrome configuration profile config.

Modify the configuration profile template with your enrolment token

1. Download the configuration profile template.
2. Open the template in a text editor of your choice.

3. Replace XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX in line 25 with your Cloud Management Enrolment Token generated above.

4. Save the file locally

Kandji Set-up for Mac OS

1. Visit Kandji admin portal Kandji | Login | Kandji and login with your organization kandji URL
2. Create a custom profile in Kandji, navigate to the Library module and follow these steps. a. Click + Add New to open the list of potential new items. b. Click Custom Profile and click Add & Configure+ to create a new profile. c. Give your profile a name. d. Assign the profile to your desired Blueprints. e. Set the device family to Mac. f. Optionally, configure Assignment Rules.

1. Upload your .mobileconfig file that you have saved locally\

1. Click Save.

2. Additionally, to Add Mac devices follow: a. Navigate to ADD DEVICES > Select Blueprint (In which you have added Custom Profile) b. Copy Enrolment portal link : https://<your domain>.kandji.io/enroll c. Open that link in your device that will be added you are asked for a Enrollment code d. Copy that ENROLLMENT CODE from kandji admin portal and use that in target device. e. It will downlode enrollmentProfile.mobileconfig f. Install that profile

This custom profile configuration will effect on each devices that are added and managed by Kandji.

Once the token has been enrolled in the devices, go to GOOGLE WORKSPACE ADMIN CONSOLE > Chrome Browser > Managed Browsers you can view your enrolled devices.

Once you have your device added in Chrome > Managed Browser , you can Deploy Browser Extension that will affect all of the added device.

Jamf Pro Set-up for Mac OS

1. Visit jamf pro admin portal and and login with your user credentials.

2. On the left, click Computers > Configuration profiles.

3. On the top right, click + New.

4. On the Options tab of your new macOS configuration profile, click Application & custom settings > External Applications.

5. On the top right, click + Add to add a new configuration.

6. Under Source, select Repository.

7. In Application domain, select com.google.chrome, then choose the app version and the stable variant.

8. Paste the token value that you want to deploy into the Chrome Browser Cloud Management token box.

9. Name the profile and assign it to any other configuration profile in Jamf Pro.

10. Select Scope and add devices to deploy the profile to your machine.

Extension Deployment Device level

You can deploy our Extension in the Organization Unit chrome browser from Google Admin Console at device level.

Organization Unit:

Open Google Admin Console and under Chrome browser,

1. Navigate to Apps and extensions > Organizational units > choose your OU> Choose browser

2. You can add our extension using Extension ID , follow below instructions: i) Click on (+) icon and select Add the Chrome App or Extension by ID ii) Paste the Extension ID that you copied from Swift security iii) Click on save to apply changes

3. Change the installation policy based on requirement (e.g. Force Install, Allow Install, Force Install and Pin to Browser toolbar or block )

4. Click save to apply changes

Chrome Browser extension & Device enrolment from Google Admin may take some time, generally it will take effect in a few minutes for most customers but some changes can take up to 24 hours to take effect.