Enroll browsers with Microsoft Intune (iOS)

Applies to iOS users who use managed Chrome browser.

As a Chrome Enterprise administrator, you can use Microsoft Intune to deploy a Chrome Enterprise Core enrollment token and enroll your Chrome browsers. You can then use your Google Admin console to enforce policies for any users who open Chrome browser on an enrolled Apple iOS device.

Before you begin

• Make sure iOS configuration is enabled in Intune and a valid APNS certificate is assigned. For details, see  Microsoft documentation .

Enroll browsers

Step 1: Generate the enrollment token

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Generate an enrollment token. See Generate enrollment token .

3. Copy the token to use in step 3 .

Step 2: Add the Google Chrome app

1. Sign into the Microsoft Endpoint Manager admin center .

2. Click  Apps All Apps Add.

3. Click Add.

4. For App type, select the iOS store appand then click Select.

5. Click Search the App Storeto search for and select the Google Chrome app.

6. At the bottom, click Select.

7. Enter any required app information and click Next.

8. For Assignment type, select Requiredand add one of the following:

   • a group of users or devices

   • all users

   • all devices

9. Click Review + save.

Step 3: Assign the enrollment token to Chrome browser 

1. Still in the Microsoft Endpoint Manager admin center , select Apps App configuration policies Add.

2. Select Managed devicesor Managed appsbased on the device management status.
   Below shows the configuration for managed devices.

3. Enter a configuration name, for example Chrome Browser Management.

4. For platform, select  iOS/iPadOSand then choose a profile type that matches your use case .

5. For Targeted app, click Select app, select Chrome, and click OK.

6. Click Next.

7. For Configuration format, select Configuration designer.

8. In the Configuration keybox, enter CloudManagementEnrollmentToken .

9. For Value type, select  String. 

10. In the Configuration valuebox, paste the enrollment token you generated in Step 1 .

11. Click Next.

12. Select any applicable Included groupsand Excluded groups.

13. Click Next Create.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.