Manage Citrix Enterprise Browser through GACS

Administrators can manage the following features using Global App Configuration service (GACS).

Use GACS to manage Citrix Enterprise Browser

The administrator can use the Global App Configuration service (GACS) for Citrix Workspace to deliver Citrix Enterprise Browser settings through a centrally managed service. GACS is designed for administrators to easily configure Citrix Workspace and manage the Citrix Workspace app settings. This feature allows admins to use the GACS to apply various settings or system policies to the Citrix Enterprise Browser on a particular store. The administrator can now configure and manage the following Citrix Enterprise Browser settings using APIs or the GACS Admin UI:

• “Enable CEB for all apps” - Makes the Citrix Enterprise Browser the default browser for opening web and SaaS apps from the Citrix Workspace app.
• “Enable save passwords” - Allow or deny end users the ability to save passwords.
• “Enable incognito mode” - Enable or disable incognito mode.
• “Managed Bookmarks” - Allow administrator to push bookmarks to the Citrix Enterprise Browser.
• “Enable developer tools” - Enable or disable developer tools within the Enterprise Browser.
• “Delete browsing data on exit” - Allow the administrator to configure what data the Citrix Enterprise Browser deletes on exit.
• “Extension Install Force list” - Allow the administrator to install extensions in the Citrix Enterprise Browser.
• “Extension Install Allow list” - Allow the administrator to configure an allowed list of extensions that users can add to the Citrix Enterprise Browser. This list leverages the Chrome Web Store.

Notes:

• The name and value pair are case-sensitive.
• All the browser settings in GACS are under the following category:

         {
              "category": "browser",
              "userOverride": false,
              "assignedTo": [
                "AllUsersNoAuthentication"
              ]
        }
<!--NeedCopy-->

The administrator can apply the settings to unmanaged devices as well. For more information, see the Global App Configuration service documentation.

User interface

To configure Citrix Enterprise Browser through the GACS Admin UI, do the following:

Note:

The minimum version that is required is:

• Citrix Workspace app for Mac 2305, and the corresponding Citrix Enterprise Browser version is 112.1.1.23.
• Citrix Workspace app for Windows 2305, and the corresponding Citrix Enterprise Browser version is 112.1.1.24.

1. Sign in to citrix.cloud.com with your credentials.

   Note:

   • Refer to the Sign Up for Citrix Cloud article for step-by-step instructions to create a Citrix Cloud account.

2. Upon authentication, click the menu button in the top left corner and select Workspace Configuration.

   

   The Workspace Configuration screen appears.

3. Click App Configuration > Citrix Enterprise Browser.

   

   You can now configure, modify, and publish Citrix Enterprise Browser feature settings.

Enable Citrix Enterprise Browser for all apps

Administrators can configure Citrix Enterprise Browser as the default browser to start web and SaaS apps from the Citrix Workspace app.

Configuration through API

To configure, here is an example JSON file for Citrix Enterprise Browser for all apps as default:

 "settings": [
                  {
                     "name": "open all apps in ceb",
                     "value": "true"
                  }
                  ]
<!--NeedCopy-->

Note:

• The default value is true.

Configuration through UI

Select the appropriate checkbox from the UI:

Enable save passwords

Administrators can allow or deny the saving of user passwords.

Configuration through API

To configure, here is an example JSON file to save passwords:

"settings": [
                 {
                    "name": "enable password save",
                    "value": "true"
                  }
                 ]

<!--NeedCopy-->

Note:

• The default value is true.

Configuration through UI

Select the appropriate checkbox from the UI:

Enable incognito mode

Administrators can enable or disable incognito mode.

Configuration through API

To configure, here is an example JSON file to enable incognito mode:

"settings": [
                 {
                  "name": "Incognito mode availability",
                  "value": "Incognito mode available"
                 }
                 ]
<!--NeedCopy-->

The other possible values are:

• Incognito mode available
• Incognito mode disabled

Note:

• The default value is false.

Configuration through UI

Select the appropriate checkbox from the UI, and then select an option from the drop-down list:

Manage bookmarks

Administrators can configure a list of bookmarks with a nested folder structure. The end user can access the preloaded bookmarks but can’t modify them. For more settings, see Global App Configuration service.

Note:

• By default, the Bookmarks bar isn’t enabled in Citrix Enterprise Browser. The end user has to navigate to citrixbrowser://settings/appearance and enable “Show bookmarks bar” option.

Configuration through API

To configure, here is an example JSON file to manage bookmarks:

       {
       "name": "Managed bookmarks",
       "value": [
            {
               "toplevel_name": "My managed bookmarks folder"
           },
           {
               "name": "Citrix",
               "url": "https://www.citrix.com/"
           },
           {
               "name": "Citrix Workspace app",
               "url": "https://www.citrix.com/products/receiver.html"
           },
           {
               "name": "Citrix Downloads",
               "children": [{
                       "name": "Download page",
                       "url": "https://www.citrix.com/downloads/workspace-app/"
                   },
                   {
                       "name": "Product documentation",
                       "url": "https://docs.citrix.com/en-us/citrix-workspace-app.html"
                   }
               ]
           }
       ]
   }
<!--NeedCopy-->

Note:

• The default value is an empty list.

Configuration through UI

Select the appropriate checkbox, and click Manage Settings. You can configure using the JSON data and save the changes.

Enable developer tools

Administrators can enable or disable developer mode.

Configuration through API

To configure, here is an example JSON file to enable developer tools:

 "settings": [
                  {
        "name": "developer tools availability",
        "value": "Allow usage of the Developer Tools"
                 }
                 ]
<!--NeedCopy-->

Other possible values:

• Disallow usage of the Developer Tools on extensions installed by enterprise policy
• Disallow usage of the Developer Tools

Note:

• The default value is Disallow usage of the Developer Tools.

Configuration through UI

Select the appropriate checkbox from the UI, and then select an option from the drop-down list:

Delete browsing data on exit

Administrators can configure what data the Citrix Enterprise Browser deletes on exit.

Configuration through API

To configure, here is an example JSON file to delete browsing data upon exit:

 "settings": [{
        "name": "Delete browsing data on exit",
        "value": [
            "browsing_history",
            "download_history",
            "cookies_and_other_site_data",
            "cached_images_and_files",
            "password_signin",
            "autofill",
            "site_settings",
            "hosted_app_data"
        ]
       }]
<!--NeedCopy-->

Notes:

• You can exclude a value to avoid being deleted.
• The default value is an empty list.

Configuration through UI

Select the appropriate checkbox from the UI, and then select an option from the drop-down list:

Support for browser extensions

You can add extensions that are provided by your administrator to the Citrix Enterprise Browser in a secure way. An administrator can deploy, manage, and control the extensions. End users can view and use the extension under citrixbrowser://extensions as required. For more settings, see Global App Configuration service.

For more information on how to identify an extension ID, see How to identify an extension ID article.

How to configure

There are two categories of extensions:

• ExtensionInstallForcelist: The administrator can configure a list of extensions that are mandatorily added to the end user’s browser profile. End users can view these extensions under the Installed section in the UI. The user can’t uninstall any of the extensions.

• ExtensionInstallAllowlist: The administrator can configure a list of extensions as part of the allowed list. End users can view these extensions under the Available section in the UI. Users can decide if they want to add a particular extension or not. Users can uninstall an extension if required.

Note:

• In case the administrator has no extensions configured under the Installed and Available sections, the end user might not view the extension manager icon in the address bar.

Forced extensions

You can configure the list of forced extensions in one of the following ways:

Configuration through API

To configure, here is an example JSON file for ExtensionInstallForcelist:

{
   "category": "browser",
    "userOverride": false,
    "assignedTo": [
     "AllUsersNoAuthentication"
                  ],
    "settings": [
                     {
        "name": "Extension Install Force list",
        "value": [
            "extension_id1",
            "extension_id2"
                     ]
                     }
                     ]
}
<!--NeedCopy-->

Note:

• The default value is an empty list.

Configuration through UI

Select the appropriate checkbox from the UI, and then click Manage settings. You can configure using the JSON data and save the changes.

Allowed extensions

You can configure the list of allowed extensions in one of the following ways:

Configuration through API

To configure, here is an example JSON file for ExtensionInstallAllowlist:

{
   "category": "browser",
    "userOverride": false,
    "assignedTo": [
     "AllUsersNoAuthentication"
              ],
    "settings": [
                     {
        "name": "Extension Install Allow list",
        "value": [
            {
              "id" : "extension_id1",
              "name" : "Name of extension",
               "install link" : "chrome store url for the extension"
            },
            {
              "id" : "extension_id2",
              "name" : "Name of the extension",
               "install link" : "chrome store url for the extension"
            }
        ]
    }
   ]
}
<!--NeedCopy-->

Note:

• The default value is an empty list.

Configuration through UI

Select the appropriate checkbox from the UI, and then click Manage settings. You can configure using the JSON data and save the changes.

How to identify an extension ID

1. Go to Chrome Web Store.
2. Search for an app and click to open. The app page appears.

3. Observe the URL. The ID is the long string of characters at the end of the URL.

   

Example JSON data

Following is an example JSON file:

{
              "category": "browser",
              "userOverride": false,
              "assignedTo": [
                "AllUsersNoAuthentication"
              ],
              "settings": [
                {
                  "name": "open all apps in cwb",
                  "value": true
                },
                {
                  "name": "incognito mode availability",
                  "value": "Incognito mode available"
                },
                {
                  "name": "developer tools availability",
                  "value": "Allow usage of the Developer Tools"
                },
                {
                  "name": "enable password save",
                  "value": true
                },
                {
                  "name": "Delete browsing data on exit",
                  "value": [
                    "browsing_history",
                    "download_history"
                  ]
                },
                {
                  "name": "Managed bookmarks",
                  "value": [
                    {
                      "toplevel_name": "My managed bookmarks folder"
                    },
                    {
                      "name": "Citrix",
                      "url": "https://www.citrix.com/"
                    },
                    {
                      "name": "Citrix Workspace app",
                      "url": "https://www.citrix.com/products/receiver.html"
                    },
                    {
                      "children": [
                        {
                          "name": "documentation",
                          "url": "https://docs.citrix.com/en-us/citrix-workspace-app.html"
                        },
                        {
                          "name": "Citrix Downloads",
                          "url": "https://www.citrix.com/downloads/workspace-app/"
                        }
                      ],
                      "name": "Chrome links"
                    }
                  ]
                },
                {
                  "name": "Extension Install Allow list",
                  "value": [
                    {
                      "name": "Momentun",
                      "install link": "https://chrome.google.com/webstore/detail/momentum/laookkfknpbbblfpciffpaejjkokdgca",
                      "id": "laookkfknpbbblfpciffpaejjkokdgca"
                    },
                    {
                      "name": "Grammarly",
                      "install link": "https://chrome.google.com/webstore/detail/grammarly-grammar-checker/kbfnbcaeplbcioakkpcpgfkobkghlhen",
                      "id": "kbfnbcaeplbcioakkpcpgfkobkghlhen"
                    }
                  ]
                },
                {
                  "name": "Extension Install Force list",
                  "value": [
                    "aapbdbdomjkkjkaonfhkkikfgjllcleb",
                    "gmbmikajjgmnabiglmofipeabaddhgne"
                  ]
                }
              ]
            }
<!--NeedCopy-->