This setting will allow you to automatically download and enable the Indeed ID ESSO extension in PAM user profiles on the Access servers. The extension is necessary to automatically fill in the privileged account's credentials in the authentication forms of web resources.
To configure the offline extension in the Google Chrome browser, you will need:
- Indeed-Id SSO extension for Google Chrome, .reg files for making changes to the registry, file update.xml (available by the link);
- Google Chrome Enterprise (available on the official website).
The steps:
- Install Google Chrome Enterprise on the PAM Access servers.
- Create a directory, on the PAM management server and make it shared (here the directory name "ESSO" is used). PAM users must have read permissions in this directory.
- Place the icpjelgegalmjjkfoilkbeeodgfbcaam.crc extension and the file update.xml in the shared directory
- Edit the file update.xml, you must specify the network path to the extension in the line #4.
Example: file://server/ESSO/icpjelgegalmjjkfoilkbeeodgfbcaam.crx - Place .reg files on the Access servers.
- Edit the file ExtensionSettings_X64.reg, you need to specify the network path to the file update.xml in the line #7
Example: file://server/ESSO/update.xml
you must specify the network path to the directory where the extension is located in the Line #10
Example: file://server/ESSO/* - Edit the ExtensionSettings_X86.reg file just as in step #6
- Run the .reg files on the Access servers to make changes to the system.
- Launch Google Chrome on the Access server, the Indeed-Id ESSO extension should load in a few seconds.