Feature Enhancement | allow to force an Enterprise Chrome extensions to run also in incognito without the end-user ability to disable the extension (and also run in Guest mode)
Reported by
assaf.al...@gmail.com,
Dec 19
|
||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 Steps to reproduce the problem: 1. create an Enterprise Chrome extension that is installed using the ExtensionInstallForcelist registry key 2. open Chrome - the extension is installed and runs successfully 3. open a new Incognito Window of Chrome - the extension is not loaded and does not run. 4. open another new Guest Window of Chrome - the extension is not loaded and does not run. What is the expected behavior? an enterprise software that is installed by an organizations to protect itself from data loss/theft should be able to install an enterprise Chrome extension and force it to run in incognito and in guest windows to prevent employees from stealing corporate data via Chrome browser. It is NOT acceptable by these organizations to simply disable Chrome incognito windows (which is possible to do with GPO) they demand to be able to allow employees to use Chrome incognito or Guest windows but still run an enterprise extension that will monitor confidential data leakage via the browser. One reason they demand to be able to allow employees to use incognito is because sometimes identity-now and salesforce and okta and workday stop allowing login... and the fastest option for the employees (and help desk of these companies) is to tell the employe to open in incognito to keep working without impacting the business. We have thousands of customers that demand it. What went wrong? The only option today to run an enterprise extension in Incognito is for the end-user (employee) to manually set the extension to run, but employees do NOT want to be monitored by the company so they will never set the extension to run in incognito. Did this work before? N/A Does this work in other browsers? N/A Chrome version: 71.0.3578.98 Channel: stable OS Version: 10.0 Flash Version:
,
Dec 19
,
Dec 20
assaf.almaz@ Thanks for the issue. As per the above description, this is a feature request to allow to force an Enterprise Chrome extensions to run also in incognito without the end-user ability to disable the extension Hence marking this as Untriaged for further updates from Dev. Thanks..
,
Dec 21
This is doable, but probably not something the extensions team will get to in the near future. cc'ing goanuj@ for enterprise triage. Also cc'ing rhalavati@ to make sure that there aren't any concerns with incognito here (I would assume not, given the enterprise has complete control, but good to double check).
,
Dec 24
There is already a way to prevent extensions from being disabled or uninstalled. So if there was a way to enable an extension by default in incognito mode (issue 173640), then this issue may consequently be resolved.
,
Jan 3
+tnagel@, Extensions can totally make incognito mode non-private, hence I lean towards not having this policy. Please note that if the more private features of incognito mode are not suitable for an Enterprise environment, admin can disable access to incognito and guest modes.
,
Jan 3
,
Jan 3
|
||||||||
►
Sign in to add a comment |
||||||||
Comment 1 by dtapu...@chromium.org
, Dec 19