Chrome managed from the Google Admin console

For firms on Google Workspace with Chrome browsers enrolled in Chrome Enterprise Core (free) or Chrome Enterprise, and for ChromeOS devices.

1. In the Admin console, go to Chrome browser > Apps & extensions > Users & browsers.
2. Pick the organizational unit.
3. Click + (bottom right) > Add from Chrome Web Store, and search for the ID bicelplgpeknobhaandbndecidlmeook, or paste the listing address https://chromewebstore.google.com/detail/sourcesecure/bicelplgpeknobhaandbndecidlmeook.
4. Set its installation policy to Force install + pin to browser toolbar.
5. Save. Browsers pick it up within a few hours, or at once after chrome://policy > Reload policies.
6. Recommended: Chrome browser > Settings, Incognito mode = Disallow incognito mode, because extensions do not run in Incognito windows by default.

Check one browser with verify.md.