RestrictSigninToPattern multiple domains

2,119 views
Skip to first unread message

Scott

unread,
May 13, 2016, 5:55:40 AM5/13/16
to Chromium-discuss
I  would like to use the "Restrict which users are allowed to sign in to Google Chrome" in a GPO (RestrictSigninToPattern).   Basically I want to restrict sign in to only "*@domain1.org" or "*@domain2.org".  Can I, and if so how, could I set the string for the two?



CONFIDENTIALITY NOTICE: This message may contain confidential information, including, but not limited to, student personally identifiable information. If you are not the intended recipient, you are hereby notified that any disclosure, copying, printing, distribution, or taking of any action in reliance in the contents of the information contained herein is strictly prohibited.

Fredrik Thorsen

unread,
Feb 21, 2020, 6:57:30 PM2/21/20
to Chromium-discuss, sbru...@highlandschools.org
The closest I can find, is line 44 in this post https://gist.github.com/WardsParadox/9ba7cec7b40783d14e2b39dc3661c9d6
<string>.*@(domain1\.org|domain2\.org)</string>
But that doesn't work and seems to be for mobiles.

Fredrik Thorsen

unread,
Feb 21, 2020, 6:57:30 PM2/21/20
to Chromium-discuss, sbru...@highlandschools.org
I'm having the same issue. I'd like to restrict to ".@contoso.com" and ".@contoso.onmicrosoft.com". Space, comma or semi colon doesn't work


On Friday, May 13, 2016 at 11:55:40 AM UTC+2, Scott wrote:

Matt Adorjan

unread,
Jul 16, 2022, 7:41:43 PM7/16/22
to Chromium-discuss, Fredrik Thorsen, sbru...@highlandschools.org
Hi all - did either of you ever get this figured out? Having a similar issue and not sure if we should be trying regex at this point or not.

Thanks!

Julian Pastarmov

unread,
Jul 18, 2022, 4:42:06 AM7/18/22
to Chromium-discuss, matt.a...@gmail.com, Fredrik Thorsen, sbru...@highlandschools.org

Looking at the source code of the policy the regex matches is a full regex matcher so anything that works in say https://regex101.com/ would work there to. For example for the domains listed by Fredrik this is a valid and minimal expression .*@contoso(\.onmicrosoft)*\.com alternatively this would work too .*@(contoso|contoso\.onmicrosoft)\.com

IF neither works please file a bug at crbug.com and also include the output in debug log that you will get when running chrome --enable-logging from the command line which should contain some information about what is not working.

Hope this helps Julian

NLC Intune

unread,
Sep 3, 2022, 12:52:45 PM9/3/22
to Chromium-discuss, matt.a...@gmail.com, Fredrik Thorsen, sbru...@highlandschools.org
This seems to be working for me:

(?:.*@domain1.org|.*@domain2.sch.uk|.*@mytenant.onmicrosoft.com)
Reply all
Reply to author
Forward
0 new messages