Configure Sophos Chrome Security auto-enrollment

If you’re using Google Workspace (formerly G Suite), you can configure the Sophos Chrome Security extension to automatically enroll with Sophos Mobile when a Google Workspace user signs in to a Chrome device.

To configure Sophos Chrome Security auto-enrollment:

  1. On the menu sidebar, select Setup > Chrome OS setup, and then select the G Suite tab.
  2. Select Generate connection code.
  3. Configure the following settings:


    Choose whether your organization owns the devices (Corporate) or the users (Personal).

    Device group

    The Sophos Mobile device group that you want to assign the devices to.

    Chrome Security policy

    Optional: A Chrome Security policy that you want to assign to the extension after the enrollment.

    Only enroll on Chrome Enterprise devices

    Optional: Sophos Chrome Security only auto-enrolls with Sophos Mobile on Chrome Enterprise devices.

    You need to purchase the Chrome Enterprise Upgrade service from Google to enroll Chrome Enterprise devices.

    For details on Chrome Enterprise, see the Google Chrome Enterprise Help.

  4. Click Save.
  5. Select Copy next to Connection code to copy the value to the clipboard.
Perform the remaining steps in the Google Admin console:
  1. Sign in to the Google Admin console with your Google Workspace account.
  2. Go to Device Management > Chrome Management > Apps & extensions.
  3. Optional Select an organizational unit.

    Sophos Chrome Security enrolls automatically only for users in that organizational unit.

  4. Select the + button at the bottom right and then select Select from Chrome App Store.
  5. Search for Sophos Chrome Security and select Select.
  6. In Policy for extensions, enter the connection code from Sophos Mobile.
  7. In Installation policy, select one of the following:
    • Force install: Install Sophos Chrome Security automatically and prevent users from removing it.
    • Force install + pin: Same as Force install, and pin Sophos Chrome Security to the Chrome OS taskbar.
  8. Save your settings.
When a Google Workspace user signs in to any Chrome device, Sophos Chrome Security is automatically installed and enrolled with Sophos Mobile. You can manage the extension from the Devices page in Sophos Mobile Admin.
If required, you can revoke the connection code to block future enrollments. Sophos Chrome Security extensions already enrolled aren’t affected.