Skip to main content

​
Platform compatibility

​
Set up the control

1

Go to MDM > Controls > Add new control

Select Google Chrome.
2

Enable the Primo Extension (optional)

Toggle on Primo Extension to automatically discover SaaS applications and prevent shadow IT by scanning logins made with employees’ professional Google accounts.
3

Add extensions

Under Custom extension ID, click Add extension to install Chrome extensions on targeted devices. Find each extension ID in the URL of its Chrome Web Store page.
4

Configure the homepage

Enter a URL to set as the default homepage.
  • Toggle Define “New tab page” as homepage to use Chrome’s new tab page instead.
  • Toggle Show home button to display the home button in the toolbar.
5

Add bookmarks (optional)

Click Add bookmark to deploy managed bookmarks to all targeted devices.
6

Set restore behavior on startup

Use the Restore behavior on startup dropdown to control what Chrome does when it launches.
7

Toggle additional settings (optional)

  • Password manager: allow employees to save and autofill passwords in Chrome’s built-in password manager.
  • Passkeys in password manager: allow employees to create and use passkeys in Chrome’s built-in password manager.
  • Default browser setting: let Chrome check whether it is the default browser and prompt employees to set it as default.
8

Select targeting

Choose which devices to apply the control to: all devices, specific device groups, or a custom target.

​
How it works

Primo pushes Chrome policies as a managed configuration profile (on macOS) or via registry keys (on Windows). Chrome detects these policies at startup and applies them automatically. Employees cannot override managed settings. A Managed by your organization notice appears in Chrome when enterprise policies are active — this is expected behavior.

​
Modify or remove the control

Open the control from MDM > Controls to edit or disable it. Disabling stops enforcement but does not remove existing configurations from devices.