Browser sign in settings

This policy controls the sign-in behavior of the browser. It allows you to specify if the user can sign in to Google Chrome with their account and use account related services like Google Chrome Sync.

If the policy is set to "Disable browser sign-in" then the user cannot sign in to the browser and use account-based services. In this case browser-level features like Google Chrome Sync cannot be used and will be unavailable. On iOS, if the user was signed in and the policy is set to "Disabled" they will be signed out immediately. On other platforms, they will be signed out the next time they run Google Chrome. On all platforms, their local profile data like bookmarks, passwords etc. will be preserved and still usable. The user will still be able to sign into and use Google web services like Gmail.

If the policy is set to "Enable browser sign-in," then the user is allowed to sign in to the browser. On all platforms except iOS, the user is automatically signed in to the browser when signed in to Google web services like Gmail. Being signed in to the browser means the user's account information will be kept by the browser. However, it does not mean that Google Chrome Sync will be turned on by default; the user must separately opt-in to use this feature. Enabling this policy will prevent the user from turning off the setting that allows browser sign-in. To control the availability of Google Chrome Sync, use the SyncDisabled policy.

If the policy is set to "Force browser sign-in" the user is presented with an account selection dialog and has to choose and sign in to an account to use the browser. This ensures that for managed accounts the policies associated with the account are applied and enforced. By default this turns on Google Chrome Sync for the account, except for the case when Google Chrome Sync was disabled by the domain admin or via the SyncDisabled policy. The default value of BrowserGuestModeEnabled will be set to disabled. Note that existing unsigned profiles will be locked and inaccessible after enabling this policy. For more information, see help center article: https://support.google.com/chrome/a/answer/7572556 . This option is not supported on Linux, Android or iOS. It will fall back to "Enable browser sign-in" if used.

If this policy is not set then the user can decide if they want to enable browser sign-in in the Google Chrome settings and use it as they see fit.

Browser sign in settings

0. Disable browser sign-in
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\Chrome
   Value Name	BrowserSignin
   Value Type	REG_DWORD
   Value	0

1. Enable browser sign-in
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\Chrome
   Value Name	BrowserSignin
   Value Type	REG_DWORD
   Value	1

2. Force users to sign-in to use the browser
   

   Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\Chrome
   Value Name	BrowserSignin
   Value Type	REG_DWORD
   Value	2