Expel Managed Phishing Extension for Chrome

Prerequisites

• You must be one of your organization's Google Workspace administrators with the proper permissions.

Install the Extension

1. Log in to the Google Workspace admin console.
2. Navigate to Devices > Chrome > Apps & extensions > Users & browsers.
3. In the bottom right, select the plus (+) icon in the yellow circle and select Add Chrome app or extension by ID.

1. Enter the value gpkcimdiphdhnenbncknfiakplflhmnc and then select SAVE.
2. Navigate back to the Google Workspace admin console and select Security.
3. Scroll down and open API controls.
4. Select MANAGE THIRD-PARTY APP ACCESS.
5. In the section Connected apps, hover over Expel for Phishing and select Change access.
6. Choose Trusted: Can access all Google services and then select SAVE. The Expel Managed Phishing app is now listed as Trusted in the Connected apps view.

1. Go back to the Admin console and select Security.
2. Scroll down and open API controls.
3. Select MANAGE DOMAIN WIDE DELEGATION.
4. Select Add new.
5. Enter the following for the Client ID and the OAuth Scopes:

   • Client ID - 528472867238-v8803num13j6691ue52qqm6tuoqpu9ns.apps.googleusercontent.com
   • OAuth scopes - https://www.googleapis.com/auth/gmail.modify
6. Select Authorize.

Update the Extension

1. Log in to the Google Workspace admin console.
2. Navigate to Devices > Chrome > Apps & extensions > Users & browsers.
3. Find the Expel Managed Phishing extension and select the row.

1. In the panel that opens, copy the JSON value under Policy for extensions and paste it into a text editor for use in a later step.

1. Select the trash can icon to delete the extension.
2. Select SAVE to complete the deletion process.
3. In the bottom right, select the plus (+) icon in the yellow circle and select Add Chrome app or extension by ID.

1. Enter the value gpkcimdiphdhnenbncknfiakplflhmnc and then select SAVE. A panel opens.
2. In the Policy for extensions field, paste in the JSON value you copied.
3. Select SAVE.
4. Navigate back to the Google Workspace admin console and select Security.
5. Scroll down and open API controls.
6. Select MANAGE THIRD-PARTY APP ACCESS.
7. In the section Connected apps, hover over Expel for Phishing and select Change access.
8. Choose Trusted: Can access all Google services and then select SAVE. The Expel Managed Phishing app is now listed as Trusted in the Connected apps view.

1. Go back to the Admin console and select Security.
2. Scroll down and open API controls.
3. Select MANAGE DOMAIN WIDE DELEGATION.
4. Select Add new.
5. Enter the following for the Client ID and the OAuth Scopes:

   • Client ID - 528472867238-v8803num13j6691ue52qqm6tuoqpu9ns.apps.googleusercontent.com
   • OAuth scopes - https://www.googleapis.com/auth/gmail.modify
6. Select Authorize.
7. To confirm the update was successful, open a Chrome browser and go to chrome://extensions.
8. Select the toggle to enable Developer mode.

1. Validate that the version of Expel Managed Phishing installed is at least version 0.0.19.