Enroll Browsers with Google endpoint management (iOS)

Applies to iOS users who use managed Chrome browser.

As a Chrome Enterprise administrator, you can use Google endpoint management to deploy a Chrome Enterprise Core enrollment token and enroll your Chrome browsers. You can then use your Google Admin console to enforce policies for any users who open Chrome browser on an enrolled Apple iOS device.

Before you begin

• Make sure you have access to the Google Admin console.
• Set up advanced mobile management for iOS devices.

Enroll browsers

Step 1: Generate the enrollment token

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeManaged browsers.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserManaged browsers.

3. (Optional) On the left, select the top-level organization. Or, select the organizational unit where you want to generate a token that will enroll browsers directly to that specific organizational unit. For information, see Add an organization unit.
4. At the top, click Enroll.
   Note: If this is your first browser enrollment, you are prompted to accept the Chrome Enterprise Core Terms of Service.
5. Under Downloads, click Appconfig File. The downloaded XML file contains the enrollment token.
6. Click Done.

Step 2: Add the Google Chrome app

1. Sign into the Admin console.
2. Click AppsWeb and mobile apps.
3. Click Add appSearch for apps.
4. Search for and select Google Chrome. Make sure to select the iOS platform version.
5. Choose which users can install the managed app from the Google Device Policy app for iOS.
   • All users in your organization—Lets all users in your organization install the app.
   • Select groups and organizational units—Lets only certain users install the app. Group settings are applied at the top organizational unit level and override organizational unit settings. If a user belongs to multiple groups with conflicting configurations, the settings are applied in order of group precedence, which you can set after you add the app.
6. Click Continue.
7. Configure app options.
   • Make this a managed app—Enforce app management to give you more control over the app and its data. For details, see How managed iOS apps work.
   • Remove this app when the configuration profile is removed—For managed apps, automatically remove the app when the user’s management profile is removed from the device.
8. Click Finish.

Step 3: Assign the enrollment token to Chrome browser

1. Still in the Admin consolein the app details for Chrome, click Managed ConfigurationsAdd Managed Configuration.
2. Enter a name for your configuration.
3. Enter the following XML text including the enrollment token you generated in Step 1:
   <dict>
    <key>CloudManagementEnrollmentToken</key>
    <string>copied-enrollment-token-value</string>
</dict>
4. Click Save.
5. At the top, click Google Chrome to go back to Application details.
6. To configure the app management settings, click Settings.
7. On the left, select your organization unit and from the drop down menu, under Managed configuration, choose the newly created managed configuration.
8. Click Save.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.