bitwarden/help
1
0
Fork 0
mirror of https://github.com/bitwarden/help synced 2025-12-06 00:03:30 +00:00
Code Issues Releases Wiki Activity

initial draft (#762)

Browse Source
This commit is contained in:
fred_the_tech_writer
2021-10-12 09:34:58 -04:00
committed by GitHub
parent c534530cad
commit 46ad5cac79
3 changed files with 391 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
_articles/faqs/org-faqs.md
View File

@@ -5,7 +5,7 @@ categories: [organizations]
featured: true
popular: false
tags: []
order: "18"
order: "19"
---
This article contains Frequently Asked Questions (FAQs) regarding **Organizations**.

389
_articles/organizations/browserext-deploy.md Normal file
View File

@@ -0,0 +1,389 @@
---
layout: article
title: Deploy Browser Extension to Managed Devices
categories: [organizations]
featured: true
popular: false
tags: []
order: "17"
---
When operating Bitwarden in a business setting, administrators may want to automate deployment of Bitwarden Browser Extensions to users with an endpoint management platform or Group Policy.
The process for doing so will be different for each Operating System and browser:
## Windows
Deploying Bitwarden Browser Extensions to browsers on Windows generally require using Windows Group Policy to target managed computers an ADMX policy template. The procedure is slightly different for each browser:
<ul class="nav nav-tabs" id="myTab" role="tablist">
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link active" id="chrometab" data-bs-toggle="tab" data-target="#chrome" role="tab" aria-controls="chrome" aria-selected="true">Chrome</a>
</li>
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link" id="firefoxtab" data-bs-toggle="tab" data-target="#firefox" role="tab" aria-controls="firefox" aria-selected="false">Firefox</a>
</li>
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link" id="edgetab" data-bs-toggle="tab" data-target="#edge" role="tab" aria-controls="edge" aria-selected="false">Edge</a>
</li>
</ul>
<div class="tab-content" id="clientsContent">
<div class="tab-pane show active" id="chrome" role="tabpanel" aria-labelledby="chrometab">
{% capture chrome %}
### Chrome
To deploy the browser extension on Windows and Google Chrome:
1. Download and unzip the [Chrome Enterprise Bundle](https://chromeenterprise.google/browser/download/#windows-tab){:target="\_blank"} for Windows.
2. From the unzipped directory:
- Copy `\Configuration\admx\chrome.admx` to `C:\Windows\PolicyDefinitions`
- Copy `\Configuration\admx\en-US\chrome.adml` to `C:\Windows\PolicyDefinitions\en-US`
3. Open the Windows Group Policy Manager and create a new GPO for Bitwarden browser extension installation.
4. Right-click on the new GPO and select **Edit...**, and proceed to navigate to **Computer Configuration** &rarr; **Policies** &rarr; **Administrative Templates** &rarr; **Google Chrome** &rarr; **Extensions**.
5. In the right-hand Settings area, select **Configure the list of force-installed apps and extensions**. In the dialog, toggle the **Enabled** option.
6. Select the **Show...** button and add the following:
```
nngceckbapebfimnlniiiahkandclblb;https://clients2.google.com/service/update2/crx
```
Click **OK**.
7. Still in **...Administrative Templates** &rarr; **Google Chrome**, select **Password manager** from the file tree.
8. In the right-hand Settings area, right-click **Enable saving passwords to the password manager** and select **Edit**. In the dialog, toggle the **Disabled** option and select **OK**.
9. Repeat **Step 8** for the **Enable Autofill for addresses** and **Enable Autofill for credit cards** options, found in Settings area for **...Administrative Templates** &rarr; **Google Chrome**.
10. Apply the newly-configured GPO to your desired scope.
{% endcapture %}
{{ chrome | markdownify }}
</div>
<div class="tab-pane" id="firefox" role="tabpanel" aria-labelledby="firefoxtab">
{% capture firefox %}
### Firefox
To deploy the browser extension on Windows and Firefox:
1. Download and unzip the [Firefox ADMX Template](https://github.com/mozilla/policy-templates/releases){:target="\_blank"} file.
2. From the unzipped directory:
- Copy `\policy_templates_<version>\windows\firefox.admx` to `C:\Windows\PolicyDefinitions`
- Copy `\policy_templates_<version>\windows\en-US\firefox.adml` to `C:\Windows\PolicyDefinitions\en-US`
3. Open the Windows Group Policy Manager and create a new GPO for the Bitwarden browser extension installation.
4. Right-click on the new GPO and select **Edit...**, and proceed to navigate to **Computer Configuration** &rarr; **Policies** &rarr; **Administrative Templates** &rarr; **Firefox** &rarr; **Extensions**.
5. In the right-hand Settings area, select **Extensions to Install**. In the dialog, toggle the **Enabled** option.
6. Select the **Show...** button and add the following:
```
https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi
```
Click **OK**.
7. Back in the file tree select **Firefox**. In the right-hand Settings area, **Edit...** and disable both the **Offer to save logins** and **Offer to save logins (default)** options.
8. Apply the newly-configured GPO to your desired scope.
{% endcapture %}
{{ firefox | markdownify }}
</div>
<div class="tab-pane" id="edge" role="tabpanel" aria-labelledby="edgetab">
{% capture edge %}
### Edge
To deploy the browser extension on Windows and Edge:
1. Download and unzip the [Microsoft Edge Policy Files](https://www.microsoft.com/en-us/edge/business/download){:target="\_blank"}.
2. From the unzipped directory:
- Copy `\windows\admx\msedge.admx` to `C:\Windows\PolicyDefinitions`
- Copy `\windows\admx\en-US\msedge.adml` to `C:\Windows\PolicyDefinitions\en-US`
3. Open the Windows Group Policy Manager and create a new GPO for the Bitwarden browser extension installation.
4. Right-click on the new GPO and select **Edit...**, and proceed to navigate to **Computer Configuration** &rarr; **Policies** &rarr; **Administrative Templates** &rarr; **Microsoft Edge** &rarr; **Extensions**.
5. In the right-hand Settings area, select **Control which extensions are installed silently**. In the dialog, toggle the **Enabled** option.
6. Select the **Show...** button and add the following:
```
jbkfoedolllekgbhcbcoahefnbanhhlh;https://edge.microsoft.com/extensionwebstorebase/v1/crx
```
Click **OK**.
7. Still in **..Administrative Templates** &rarr; **Microsoft Edge**, select **Password manager and protection** from the file tree.
8. In the right-hand Settings area, right-click **Enable saving passwords to the password manager** and select **Edit**. In the dialog, toggle the **Disabled** option and select **OK**.
9. Repeat **Step 8** for the **Enable Autofill for addresses** and **Enable Autofill for credit cards** options, found in Settings area for **...Administrative Templates** &rarr; **Microsoft Edge**.
10. Apply the newly-configured GPO to your desired scope.
{% endcapture %}
{{ edge | markdownify }}
</div>
</div>
## Linux
Deploying Bitwarden Browser Extensions to browsers on Linux generally involves using a `.json` file to set configuration properties. The procedure is slightly different for each browser:
<ul class="nav nav-tabs" id="myTab" role="tablist">
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link active" id="chrometab2" data-bs-toggle="tab" data-target="#chrome2" role="tab" aria-controls="chrome2" aria-selected="true">Chrome</a>
</li>
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link" id="firefoxtab2" data-bs-toggle="tab" data-target="#firefox2" role="tab" aria-controls="firefox2" aria-selected="false">Firefox</a>
</li>
</ul>
<div class="tab-content" id="clientsContent">
<div class="tab-pane show active" id="chrome2" role="tabpanel" aria-labelledby="chrometab2">
{% capture chrome2 %}
### Chrome
To deploy the browser extension on Linux and Google Chrome:
1. Download the [Google Chrome .deb or .rpm](https://www.google.com/chrome/?platform=linux){:target="\_blank"} for Linux.
2. Download the [Chrome Enterprise Bundle](https://chromeenterprise.google/browser/download/#windows-tab){:target="\_blank"}.
3. Unzip the Enterprise Bundle (`GoogleChromeEnterpriseBundle64.zip` or `GoogleChromeEnterpriseBundle32.zip`) and open the `/Configuration` folder.
4. Make a copy of the `master_preferences.json` (in Chrome 91+, `initial_preferences.json`) and rename it `managed_preferences.json`.
5. Add the following to `managed_preferences.json`:
```
{
"policies:" {
"ExtensionSettings": {
"nngceckbapebfimnlniiiahkandclblb": {
"installation_mode": "force_installed",
"update_url":
"https://clients2.google.com/service/update2/crx"
}
}
}
}
```
In this JSON object, `"nngceckbapebfimnlniiiahkandclblb"` is the application identifier for the Bitwarden browser extension. Similarly, `"https://clients2.google.com/service/update2/crx"` signals Chrome to use the Chrome Web Store to retrieve the identified application.
{% callout info %}You may also configure forced installations using the [ExtensionInstallForcelist](https://chromeenterprise.google/policies/?policy=ExtensionInstallForcelist){:target="\_blank"} policy, however the [ExtensionSettings](https://support.google.com/chrome/a/answer/7517525#getID&zippy=%2Cset-custom-message-for-blocked-apps-and-extensions%2Cprevent-apps-and-extensions-from-altering-webpages){:target="\_blank"} method will supersede ExtensionInstallForceList.{% endcallout %}
6. (**Recommended**) To [disable](https://chromeenterprise.google/policies/#PasswordManagerEnabled){:target="\_blank"} Chrome's built-in password manager, add the following to `managed_preferences.json` inside of `"policies": { }`:
```
{
"PasswordManagerEnabled": false
}
```
7. Create the following directories if they do not already exist:
```
mkdir /etc/opt/chrome/policies
mkdir /etc/opt/chrome/policies/managed
```
8. Move `managed_preferences.json` into `/etc/opt/chrome/policies/managed`.
9. As you will need to deploy these files to users' machines, we recommend making sure only admins can write files in the `/managed` directory:
```
chmod -w /etc/opt/chrome/policies/managed
```
10. Using your preferred software distribution or MDM tool, deploy the following to users' machines:
- Google Chrome Browser
- `/etc/opt/chrome/policies/managed/managed_preferences.json`
{% callout success %}For more help, refer to Google's [Chrome Browser Quick Start for Linux](https://support.google.com/chrome/a/answer/9025926?hl=en&ref_topic=9025817){:target="\_blank"} guide.{% endcallout %}
{% endcapture %}
{{ chrome2 | markdownify }}
</div>
<div class="tab-pane" id="firefox2" role="tabpanel" aria-labelledby="firefoxtab2">
{% capture firefox2 %}
### Firefox
To deploy the browser extension on Linux and Firefox:
1. Download [Firefox for Linux](https://www.mozilla.org/en-US/firefox/all/#product-desktop-release){:target="\_blank"}.
2. Create a `distribution` directory within the Firefox installation directory.
3. In the `distrubition` directory, create a file `policies.json`.
4. Add the following to `policies.json`:
```
{
"policies": {
"ExtensionSettings": {
"446900e4-71c2-419f-a6a7-df9c091e268b": {
"installation_mode": "force_installed",
"install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi"
}
}
}
}
```
In this JSON object, `"446900e4-71c2-419f-a6a7-df9c091e268b"` is the extension ID for the Bitwarden browser extension. Similarly, `"https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi"` signals Firefox to use the extension store to retrieve the extension.
5. (**Recommended**) To [disable](https://github.com/mozilla/policy-templates/blob/master/README.md#passwordmanagerenabled){:target="\_blank"} Firefox's built-in password manager, add the following to `policies.json` inside of `"policies": { }`:
```
{
"PasswordManagerEnabled": false
}
```
6. Using your preferred software distribution or MDM tool, deploy the following to users' machines:
- Firefox Browser
- `/distribution/policies.json`
{% callout success %}For more help, refer to Firefox's [policies.json Overview](https://support.mozilla.org/en-US/kb/customizing-firefox-macos-using-configuration-prof){:target="\_blank"} or [Policies README](https://github.com/mozilla/policy-templates/blob/master/README.md){:target="\_blank"} on Github.{% endcallout %}
{% endcapture %}
{{ firefox2 | markdownify }}
</div>
</div>
## MacOS
Deploying Bitwarden Browser Extensions to browsers on macOS generally involves using a property list (`.plist`) file. The procedure is slightly different for each browser:
<ul class="nav nav-tabs" id="myTab" role="tablist">
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link active" id="chrometab3" data-bs-toggle="tab" data-target="#chrome3" role="tab" aria-controls="chrome3" aria-selected="true">Chrome</a>
</li>
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link" id="firefoxtab3" data-bs-toggle="tab" data-target="#firefox3" role="tab" aria-controls="firefox3" aria-selected="false">Firefox</a>
</li>
<li class="nav-item" id="tab" role="presentation">
<a class="nav-link" id="edgetab3" data-bs-toggle="tab" data-target="#edge3" role="tab" aria-controls="edge3" aria-selected="false">Edge</a>
</li>
</ul>
<div class="tab-content" id="clientsContent">
<div class="tab-pane show active" id="chrome3" role="tabpanel" aria-labelledby="chrometab3">
{% capture chrome3 %}
### Chrome
To deploy the browser extension on macOS & Google Chrome:
1. Download the [Google Chrome .dmg or .pkg](https://chromeenterprise.google/browser/download/#mac-tab){:target="\_blank"} for macOS.
2. Download the [Chrome Enterprise Bundle](https://chromeenterprise.google/browser/download/#windows-tab){:target="\_blank"}.
3. Unzip the Enterprise Bundle (`GoogleChromeEnterpriseBundle64.zip` or `GoogleChromeEnterpriseBundle32.zip`).
4. Open the `/Configuration/com.Google.Chrome.plist` file with any text editor.
5. Add the following to the `.plist` file:
```
<key>ExtensionSettings</key>
<dict>
<key>nngceckbapebfimnlniiiahkandclblb</key>
<dict>
<key>installation_mode</key>
<string>force_installed</string>
<key>update_url</key>
<string>https://clients2.google.com/service/update2/crx</string>
</dict>
</dict>
```
In this codeblock, `nngceckbapebfimnlniiiahkandclblb` is the application identifier for the Bitwarden browser extension. Similarly, `https://clients2.google.com/service/update2/crx` signals Chrome to use the Chrome Web Store to retrieve the identified application.
{% callout info %}You may also configure forced installations using the [ExtensionInstallForcelist](https://chromeenterprise.google/policies/?policy=ExtensionInstallForcelist){:target="\_blank"} policy, however the [ExtensionSettings](https://support.google.com/chrome/a/answer/7517525#getID&zippy=%2Cset-custom-message-for-blocked-apps-and-extensions%2Cprevent-apps-and-extensions-from-altering-webpages){:target="\_blank"} method will supersede ExtensionInstallForceList.{% endcallout %}
6. (**Recommended**) To [disable](https://chromeenterprise.google/policies/#PasswordManagerEnabled){:target="\_blank"} Chrome's built-in password manager, add the following to `com.Google.Chrome.plist`:
```
<key>PasswordManagerEnabled</key>
<false />
```
7. Convert the `com.Google.Chrome.plist` file to a configuration profile using a conversion tool like [mcxToProfile](https://github.com/timsutton/mcxToProfile){:target="\_blank"}.
8. Deploy the Chrome `.dmg` or `.pkg` and the configuration profile using your software distribution or MDM tool to all managed computers.
{% callout success %}For more help, refer to Google's [Chrome Browser Quick Start for Mac](https://support.google.com/chrome/a/answer/9020580?hl=en&ref_topic=7650028){:target="\_blank"} guide.{% endcallout %}
{% endcapture %}
{{ chrome3 | markdownify }}
</div>
<div class="tab-pane" id="firefox3" role="tabpanel" aria-labelledby="firefoxtab3">
{% capture firefox3 %}
### Firefox
To deploy the browser extension on MacOS and Firefox:
1. Download and install [Firefox for Enterprise](https://www.mozilla.org/en-US/firefox/enterprise/#download){:target="\_blank"} for macOS.
2. Create a `distribution` directory in `Firefox.app/Contents/Resources/`.
3. In the created `/distribution` directory, create a new file `org.mozilla.firefox.plist`.
{% callout success %}Use the [Firefox .plist template](https://github.com/mozilla/policy-templates/blob/master/mac/org.mozilla.firefox.plist){:target="\_blank"} and [Policy README](https://github.com/mozilla/policy-templates/blob/master/README.md){:target="\_blank"} for reference.{% endcallout %}
3. Add the following to `org.mozilla.firefox.plist`:
```
<key>ExtensionSettings</key>
<dict>
<key>446900e4-71c2-419f-a6a7-df9c091e268b</key>
<dict>
<key>installation_mode</key>
<string>force_installed</string>
<key>update_url</key>
<string>https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi</string>
</dict>
</dict>
```
In this codeblock, `446900e4-71c2-419f-a6a7-df9c091e268b` is the extension ID for the Bitwarden browser extension. Similarly, `https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi` signals Firefox to use the extension store to retrieve the application.
4. (**Recommended**) To [disable](https://github.com/mozilla/policy-templates/blob/master/README.md#passwordmanagerenabled){:target="\_blank"} Firefox's built-in password manager, add the following to `org.mozilla.firefox.plist`:
```
<dict>
<key>PasswordManagerEnabled</key>
<false/>
</dict>
```
5. Convert the `org.mozilla.firefox.plist` file to a configuration profile using a conversion tool like [mcxToProfile](https://github.com/timsutton/mcxToProfile){:target="\_blank"}.
8. Deploy the Firefox `.dmg` and the configuration profile using your software distribution or MDM tool to all managed computers.
{% endcapture %}
{{ firefox3 | markdownify }}
</div>
<div class="tab-pane" id="edge3" role="tabpanel" aria-labelledby="edgetab3">
{% capture edge3 %}
### Edge
To deploy the browser extension on macOS and Microsoft Edge:
1. Download the [Microsoft Edge for macOS .pkg](https://www.microsoft.com/en-us/edge){:target="\_blank"} file.
2. In Terminal, use the following command to create a `.plist` file for Microsoft Edge:
```
/usr/bin/defaults write ~/Desktop/com.microsoft.Edge.plist RestoreOnStartup -int 1
```
3. Use the following command to convert the `.plist` from binary to plain text:
```
/usr/bin/plutil -convert xml1 ~/Desktop/com.microsoft.Edge.plist
```
4. Open `com.microsoft.Edge.plist` and add the following:
```
<key>ExtensionSettings</key>
<dict>
<key>jbkfoedolllekgbhcbcoahefnbanhhlh</key>
<dict>
<key>installation_mode</key>
<string>force_installed</string>
<key>update_url</key>
<string>https://edge.microsoft.com/extensionwebstorebase/v1/crx</string>
</dict>
</dict>
```
In this codeblock, `jbkfoedolllekgbhcbcoahefnbanhhlh` is the application identifier for the Bitwarden browser extension. Similarly, `https://edge.microsoft.com/extensionwebstorebase/v1/crx` signals Edge to use the Edge Add-On Store to retrieve the identified application.
{% callout info %}You may also configure forced installations using the [ExtensionInstallForceList](https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#extensioninstallforcelist){:target="\_blank"}, however the [ExtensionSettings](https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#extensionsettings){:target="\_blank"} method will supersede ExtensionInstallForceList.{% endcallout %}
5. (**Recommended**) To [disable](https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies#passwordmanagerenabled){:target="\_blank"} Edge's built-in password manager, add the following to `com.microsoft.Edge.plist`:
```
<key>PasswordManagerEnabled</key>
<false/>
```
6. Convert the `com.microsoft.Edge.plist` file to a configuration profile using a conversion tool like [mcxToProfile](https://github.com/timsutton/mcxToProfile){:target="\_blank"}.
8. Deploy the Edge `.pkg` and the configuration profile using your software distribution or MDM tool to all managed computers.
{% callout success %}**For Jamf-specific** help, refer to Microsoft's documentation on [Configuring Microsoft Edge policy settings on macOS with Jamf](https://docs.microsoft.com/en-us/deployedge/configure-microsoft-edge-on-mac-jamf){:target="\_blank"}.{% endcallout %}
{% endcapture %}
{{ edge3 | markdownify }}
</div>
</div>

2
_articles/organizations/organization-videos.md
View File

@@ -5,7 +5,7 @@ categories: [organizations]
featured: true
popular: false
tags: [organizations, videos, bitwarden 101]
order: "17"
order: "18"
---
## Bitwarden 101 - Organizations