# Chrome integration with MDM using G Suite

Last updated: August 13, 2026

This guide explains how to integrate G Suite with MDM to enable Chromebook enrollment and management. It covers the prerequisites — including required Google Workspace license tiers (Enterprise Standard, Enterprise Plus, or Education Plus) — and walks through two key steps: configuring Chrome Management Partner Access in the Google Admin Console and completing the G Suite integration in MDM using your domain credentials or OAuth Client ID and Client Secret. After integration, organizational units and users sync automatically from Google Admin Console to the MDM server.

## Pre-requisites

1. To manage Chrome OS devices in MDM, you need to have either **Enterprise Standard** or **Enterprise Plus** or **Education Plus (for schools/universities)** Google Workspace license.
2. Verify the Workspace Admins licenses in the [Google Admin Console](https://support.google.com/a/answer/33387?hl=en) under **Billing > Subscriptions**.
3. To **Purchase or Upgrade** the licence, follow [Google’s official licensing guide](https://admin.google.com). These licenses enable MDM integration for bulk enrollment, policy enforcement, security controls, and auto-syncing, so Chromebooks added in Google Admin instantly reflect in the MDM Console.

## Procedure

- [Step #1: Configure Google Admin Console](https://www.manageengine.com/mobile-device-management/help/enrollment/integrate_gsuite_mdm_chromebooks.html#step_1)
- [Step #2: Integrate with MDM](https://www.manageengine.com/mobile-device-management/help/enrollment/integrate_gsuite_mdm_chromebooks.html#step_2)

### Step #1: Configure Google Admin Console

- Login to [Google Admin Console](https://admin.google.com), with your admin credentials and select **Devices**.

![Chromebook MDM management — step 1](https://www.manageengine.com/mobile-device-management/help/images/chromebook_mdm_1.png)

- The Chrome device has not been added previously, click **Start Trial** under the **Chrome Devices** option. Once enrolled in the trial, navigate back to the devices page.
- Select **Chrome -> Apps & extensions -> Users & browsers**, from the left pane.

![Chromebook MDM management — step 2](https://www.manageengine.com/mobile-device-management/help/images/chromebook_mdm_2.png)

- Now, click **Settings** from the dropdown menu. Under **User & Browser settings** navigate to **Chrome Management - Partner Access**. Select **Enable Chrome Management - Partner Access** and agree to the given Terms and Conditions.

![Chromebook MDM management — step 5](https://www.manageengine.com/mobile-device-management/help/images/chromebook_mdm_5.png)

![Chromebook MDM management — step 7](https://www.manageengine.com/mobile-device-management/help/images/chromebook_mdm_7.png)

- Click **Save** to save the user settings.
- Now, click **Device Settings** and navigate to **Chrome Management - Partner Access**. Select **Enable Chrome Management - Partner Access** and agree to the given terms and conditions.

![Chromebook MDM management — step 6](https://www.manageengine.com/mobile-device-management/help/images/chromebook_mdm_6.png)

- Click **Save** to save the device settings.
- To enable **Chrome Policy API**, login to **[Google Cloud Console](https://console.cloud.google.com/)** using your admin account.
- Go to **API & Services > Library**.
- In the search bar, type **Chrome Policy API** to check if it is enabled.

![Chrome Policy API configuration for Chromebook MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome-policy-api.png)

- In the search bar, type **Admin SDK API** to check if it is enabled.

![Admin SDK API configuration for Google Workspace MDM](https://www.manageengine.com/mobile-device-management/help/images/admin-sdk-api.png)

### Step #2: Integrate with MDM

- On the MDM server, click the **Enrollment** tab from the top menu and select **Chromebook Enrollment**, present under **Chrome OS**.
- If you've already integrated G Suite in Android Enterprise you can go directly to step 3. If not, click **Configure Now** and provide the **domain** registered with G Suite as well as the **domain admin account**.

![Configuring Google Workspace for Chromebook MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_configuregspace.png)

- In case of MDM On-Premise, if OAuth is not configured, you will get an error message saying **"OAuth App details are not yet configured".**
- Click **here** to configure OAuth. You will be prompted to enter the Client ID and Client Secret. [How to obtain Client ID and Client Secret?](https://mecms.manageengine.com/manageengine/mobile-device-management/help/enrollment/integrate_gsuite_mdm_chromebooks.html#How%20to%20obtain%20Client%20ID%20and%20Client%20Secret)
- Once you have entered the Client ID and Client Secret, click **Integrate** to complete Chrome integration using G Suite. You can now enroll Chromebooks using MDM.

![Integrating Chromebook with ManageEngine MDM using G Suite](https://www.manageengine.com/mobile-device-management/help/images/chrome_integrate.png)

**Note:** After integration, all the org units and users will be synced from the Google Admin Console and will be displayed in our MDM server.

## How to obtain Client ID and Client Secret

- Log in to the [Google Console](https://console.cloud.google.com/) with your G Suite admin account.

![Chromebook enrollment — step 1 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_1.png)

- Click **Select Project -> New Project** and enter the required details.

![Chromebook enrollment — step 2 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_2.png)

- Navigate to **APIs & services -> Credentials -> Create Credentials -> OAuth Client ID.**

![Chromebook enrollment — step 3 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_3.png)

![Chromebook enrollment — step 4 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_4.png)

- If you are configuring OAuth Authentication for the first time, you have to set up your **OAuth Consent Screen.**
- On the left panel, click **OAuth Consent Screen**, and choose the User Type as **Internal.**
- Click **Create.** You will now have to enter the app name, support email and developer contact information and click **Save and Continue.**

![Chromebook enrollment — step 9 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_9.png)

- Now navigate to **APIs & services -> Credentials -> Create Credentials -> OAuth Client ID.** Select **Web Application as the Application type.**

![Chromebook enrollment — step 5 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_5.png)

- Enter **https://www.manageengine.com/ems/OAuthAuthorization.html** as Authorized redirect URIs and click **Create.**

![Chromebook enrollment — step 6 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_6.png)

![Chromebook enrollment — step 7 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_7.png)

- A new set of **Client ID and Client Secret** will be generated which is to be copied and pasted back on the MDM server.

![Chromebook enrollment — step 8 in ManageEngine MDM](https://www.manageengine.com/mobile-device-management/help/images/chrome_enrollment_8.png)

- Once you have entered the Client ID and Client Secret, click **Integrate.**

Now the OAuth will be successfully configured on the MDM server.

## Troubleshooting tips

### Unable to see the Device management options

Confirm your license tier supports Chrome OS management (e.g., upgrade to Enterprise Standard).

### Unable to apply policies

Check if the Chromebook’s organizational unit (OU) has the correct license assigned.

### Unable to Integrate G Suite with MDM

If you are unable to integrate G Suite with MDM, follow the steps mentioned below:

1. You have to sign in into the account which is already integrated and remove the access. To do so,
2. Go to this [page](https://myaccount.google.com/permissions) and log in to the account.
3. In case of MDM Cloud, select **Manageengine MDM** and for On-Premise, select the app name which you have created on the Google Admin Console. Now click **Remove access**.

![Managed Google Play integration FAQ screenshot](https://www.manageengine.com/mobile-device-management/images/faq_GW_int.png)

Now the G Suite will get successfully integrated with MDM.

## Frequently Asked Questions

**What Google Workspace license is required to manage Chrome OS devices in MDM?**

You need an Enterprise Standard, Enterprise Plus, or Education Plus (for schools/universities) Google Workspace license to manage Chrome OS devices in MDM.

**Why can't I see the Device management options in Google Admin Console?**

This usually means your license tier doesn't support Chrome OS management. Confirm your license supports it, or upgrade to Enterprise Standard.

**Why aren't policies being applied to Chromebooks after integration?**

Check if the Chromebook's organizational unit (OU) in Google Admin Console has the correct license assigned.

**How do I re-integrate G Suite with MDM if the integration fails?**

Sign in to the account already integrated and remove its access via the Google Account permissions page, then repeat the Chrome Policy API and Admin SDK API setup steps and integrate again.