Introduction
The new Inspera Assessment Lockdown Browser is only supported on managed Chromebooks and it requires Player version 3.47.0 or higher.
With Google’s scheduled phase-out of the native Kiosk application on Chromebooks by October 2028, Inspera is introducing a new Progressive Web Application (PWA) to provide a secure and uninterrupted testing environment. This new application will ensure a seamless experience for test-takers while maintaining a lockdown environment similar to the existing Kiosk app.
Actions for the Google Admin Console administrator (IT department).
The Google Admin Console administrators for each customer must make the new application available on managed devices for test takers. Required actions for administrators are listed below:
- Log Into Admin Console: Access the Admin console for your organization.
- Navigate to Devices: Select "Devices" from the left panel on the landing page.
- Select Chrome: Expand the "Chrome" option.
- Access Apps and Extensions: Click on "Apps and Extensions."
- Go to Kiosks: In the top panel, select the "Kiosks" tab.
- Choose Organizational Units: If you manage multiple accounts, you should select the correct account under "Kiosk mode accounts. "
- Add by URL: Click "Add" and select "Add by URL." A new popup window will appear.
- Enter the URL: Paste the URL of the new PWA Application and click on "Save".
Inspera will be removing support i.e. no further development will be done and resolution of bugs or issues will not be done from May 2025 on the native Kiosk Application. Kindly move to the PWA application as soon as possible for a seamless test-taker experience.
Additional Available Configurations
How to install Companion Extensions?
Go to the Google Admin console and click on the PWA app installation for on the environment and scroll down to Add Extension → Add from a custom URL
Select “From a custom URL“ and enter:
- 2.1 Extension ID
- 2.2 The URL to the updated XML for the extension
Setting “Allow enterprise Challenge“ needs to be enabled on the settings for this Companion Extension
Enable candidate to exit PWA manually
For candidates to exit the PWA Chromebook App manually, Google admin Console administrators need to install the following extensions:
| Custom URL to use | Extension Id |
| https://d133zon9jtcf53.cloudfront.net/ia-chromeapp/kiosk-device-ops-extension/releases/latest/kiosk-device-ops-extension-update.xml | ocdnbndkdgbmfogeiiibfkkglgonpcko |
Stricter Kiosk Check Verifications
To ensure PWA uses stricter Kiosk check verifications i.e PWA understands that the test designated to use Chromebook Kiosk is running inside Chromebook Kiosk only, ensure the following steps install the following extension
| Custom URL to use | Extension Id |
| https://d133zon9jtcf53.cloudfront.net/ia-chromeapp/kiosk-mode-verificator-extension/releases/latest/kiosk-mode-verificator-extension-update.xml | colcojdppcfhidiandmjghohogfcjekf |
1. Whitelist the “Kiosk Mode Verification “ Service Account in the institution in the Google Admin console.
-
- Go to Devices → Chrome → Settings → Device Settings → Verified mode
- Then System → Kiosk mode accounts → <your managed devices group name>
2. In the Configuration section add the following service URLs inside Services with full access:
pwa-kiosk-mode-verificator-pro@majestic-parity-452209-j8.iam.gserviceaccount.com
3. Whitelist this URL https://verifiedaccess.googleapis.com to prevent local network configurations from blocking them.
4. Add the following JSON in the “Managed Configuration” field for the PWA. This is to be added only after the previous steps have been completed.
{
"kiosk_checker": ["verified_access"]
}
Whitelist tenancies where Audio record Question types will be used
Access to the microphone needs to be provided to make the Audio Record Question type Work seamlessly. You don’t need to whitelist every tenant domain in Inspera, only the tenant domains that candidates will use in their managed Chromebook devices. Institutions need to set this up only once.
The admin needs to perform the following steps:
- Select the intended Kiosk account, then click on the new PWA application. A panel window would appear at the right of the screen.
- Once the new pop-up window appears, scroll down to Additional URL Origins in the pop-up.
-
Put all the domain IDs within the text field and click on save.