As an admin, you can use the Google Admin console to install web apps—including websites, progressive web apps (PWAs), and isolated web apps (IWAs)—on managed ChromeOS devices in locked-down kiosk mode. Additionally, you can configure these web apps to automatically launch on kiosk devices, as well as enhance functionality and customize behavior by adding extensions to them.
Considerations
- You should only add websites, PWAs, and IWAs that you fully trust. For them to work properly in kiosk mode, all web permissions are granted without requesting a user’s consent. For example, users aren’t asked for permission to access camera or microphone when using a web app in kiosk mode.
- Make sure that URLs that you specify do not have redirects. Permission requests are automatically granted only from the original URL. Permission requests from a different URL are automatically rejected.
- (Applies to websites and PWAs, not IWAs) If the kiosk app requests web permissions from multiple URL origins, you can specify these origins in the Admin console. Permission requests from specified origins are automatically allowed.
Step 1: Add web apps to kiosks
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
- For websites and PWAs:
- Point to Addand click Add by URL.
- Enter the URL.
Use URLs that do not redirect to a different origin. For example, for Google Maps, use https://www.google.com/maps, not https://maps.google.com. - Click Save.
- For IWAs:
- Point to Addand click Add an Isolated Web App.
- Enter the web bundle ID. This is a base32 [a-z2-7] string of 56 or 58 characters.
- Enter the update manifest URL.
- Click Save.
Step 2: (Optional) Set apps to launch automatically
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
- Next to Auto-launch app, under Installation policy, click the list and choose the web app that you want to automatically launch.
- At the top, click Save.
Step 3: (Optional) Specify additional URL origins
Applies to websites and PWAs, not IWAs
If the kiosk app uses more than one URL origin, you can specify additional origins in the Admin console. All specified origins are automatically allowed. Any other origin URLs are rejected.
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
- Click the kiosk app for which you want to specify additional URL origins.
- Under Additional URL origins for this kiosk app, enter the URL origins.
Note: For information on valid URL patterns, see Enterprise policy URL pattern format .
- Click Save.
Step 4: (Optional) Add extensions to web apps
- Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
- (Optional) To apply the setting to a department or team, at the side, select an organizational unit. Show me how
- Find and click the row of the URL that you want to add an extension to. A side panel opens where you can see additional details and configure policies.
- Go to Extensions.
- Click Add extension.
- Select Add from Chrome Web Storeand find and click the extension you want to add.
- Click Select. The name and ID of the extension appears in the side panel under Extensions.
- Click Save.
