Enroll browsers with Microsoft Intune (iOS)

Applies to iOS users who use managed Chrome browser.

As a Chrome Enterprise administrator, you can use Microsoft Intune to deploy a Chrome Enterprise Core enrollment token and enroll your Chrome browsers. You can then use your Google Admin console to enforce policies for any users who open Chrome browser on an enrolled Apple iOS device.

Before you begin

• Make sure iOS configuration is enabled in Intune and a valid APNS certificate is assigned. For details, see Microsoft documentation.

Enroll browsers

Step 1: Generate the enrollment token

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. Generate an enrollment token. See Generate enrollment token.

3. Copy the token to use in step 3.

Step 2: Add the Google Chrome app

1. Sign into the Microsoft Endpoint Manager admin center.

2. Click AppsAll AppsAdd.

3. Click Add.

4. For App type, select the iOS store app and then click Select.

5. Click Search the App Store to search for and select the Google Chrome app.

6. At the bottom, click Select.

7. Enter any required app information and click Next.

8. For Assignment type, select Required and add one of the following:

   • a group of users or devices

   • all users

   • all devices

9. Click Review + save.

Step 3: Assign the enrollment token to Chrome browser 

1. Still in the Microsoft Endpoint Manager admin center, select AppsApp configuration policiesAdd.

2. Select Managed devices or Managed apps based on the device management status.
   Below shows the configuration for managed devices.

3. Enter a configuration name, for example Chrome Browser Management.

4. For platform, select iOS/iPadOS and then choose a profile type that matches your use case.

5. For Targeted app, click Select app, select Chrome, and click OK.

6. Click Next.

7. For Configuration format, select Configuration designer.

8. In the Configuration key box, enter CloudManagementEnrollmentToken.

9. For Value type, select String. 

10. In the Configuration value box, paste the enrollment token you generated in Step 1.

11. Click Next.

12. Select any applicable Included groups and Excluded groups.

13. Click NextCreate.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.