Skip to content

Configure Sophos Chrome Security auto-enrollment

If you’re using Google Workspace (formerly G Suite), you can configure the Sophos Chrome Security extension to automatically enroll with Sophos Mobile when a Google Workspace user signs in to a Chrome device.

To configure Sophos Chrome Security auto-enrollment:

  1. On the menu sidebar, click Setup > Google setup, and then click the Google Workspace tab.
  2. Click Generate connection code.
  3. Configure the following settings:

    • Owner: Choose whether your organization owns the devices (Corporate) or the users (Personal).
    • Device group: The Sophos Mobile device group that you want to assign the devices to.
    • Chrome Security policy (Optional): A Chrome Security policy that you want to assign to the extension after the enrollment.
    • Only enroll on Chrome Enterprise devices (Optional): Sophos Chrome Security only auto-enrolls with Sophos Mobile on Chrome Enterprise devices.


      A Chrome Enterprise device is a ChromeOS device with the Chrome Enterprise upgrade. You can purchase the upgrade bundled with the device or as a standalone license. See Google’s purchase options information.

  4. Click Save.

  5. Click Copy next to Connection code to copy the value to the clipboard.

Perform the remaining steps in the Google Admin console:

  1. Sign in to the Google Admin console with your Google Workspace account.
  2. On the dashboard, click Devices > Chrome devices.
  3. In the navigation bar, select Apps & extensions.

    The Apps and extensions menu entry.

  4. Optional: Select an organizational unit.

    Sophos Chrome Security enrolls automatically only for users in that organizational unit.

  5. Hover over the + button at the bottom right and click Add from Chrome Web Store.

    Location of the Add from Chrome Web Store option.

  6. Search for Sophos Chrome Security and click Select.

  7. In Policy for extensions, enter the connection code from Sophos Mobile.

    Connection code example.

  8. In Installation policy, select one of the following:

    • Force install: Install Sophos Chrome Security automatically and prevent users from removing it.
    • Force install + pin: Same as Force install, and pin Sophos Chrome Security to the Chrome OS taskbar.

    The Installation policy options.

  9. Save your settings.

When a Google Workspace user signs in to any Chrome device, Sophos Chrome Security is automatically installed and enrolled with Sophos Mobile. You can manage the extension from the Devices page in Sophos Mobile Admin.

If required, you can revoke the connection code to block future enrollments. Sophos Chrome Security extensions already enrolled aren’t affected.