caption: Configure list of force-installed Isolated Web Apps
desc: |-
  Setting the policy specifies a list of isolated web apps (IWAs) that install silently.
        IWAs are applications that have useful security properties unavailable to normal web pages. They are packaged in a Signed Web Bundle. The public key of the Signed Web Bundle is used to create the Web Bundle ID that identifies the IWA.
        So far this policy works for Managed Guest Session only.

        Each list item of the policy is an object which has two mandatory fields: the update manifest <ph name="URL_LABEL">URL</ph> and Web Bundle ID of the Isolated Web App.

        Each item can also include these optional fields:

          * <ph name="UPDATE_CHANNEL_OPTION">update_channel</ph>: The IWA release/update channel name. If not set, "default" is used.

          * <ph name="PINNED_VERSION_OPTION">pinned_version</ph>:  A specific version to install. The system will attempt to install this version if available on the specified update channel. By default, pinning an IWA to a specific version prevents it from being updated beyond that version. To unpin, remove this field.

          * <ph name="ALLOW_DOWNGRADES_OPTION">allow_downgrades</ph>:: Enables installing older versions of the IWA. This requires the `pinned_version` field to be set. If not provided or set to <ph name="FALSE">false</ph> downgrading is disabled for that IWA.
example_value:
- update_manifest_url: https://example.com/isolated_web_app/update_manifest.json
  web_bundle_id: aerugqztij5biqquuk3mfwpsaibuegaqcitgfchwuosuofdjabzqaaic
  update_channel: beta
  allow_downgrades: true
  pinned_version: 1.2.3
features:
  dynamic_refresh: true
  per_profile: true
supported_on:
- chrome_os:128-
future_on:
- chrome.*
owners:
- file://chrome/browser/web_applications/isolated_web_apps/OWNERS
- iwa-team@google.com
- simonha@google.com
schema:
  items:
    properties:
      update_manifest_url:
        type: string
      web_bundle_id:
        type: string
      update_channel:
        type: string
        description: >-
          The name of the IWA's update/release channel. This value can be any string;
          no restrictions are imposed. If no value is provided, the "default"
          channel will be used.
      allow_downgrades:
        type: boolean
        description: >-
          Enables the downgrading feature for IWAs. By default, only newer versions of IWAs are installed. When set to <ph name="TRUE">true</ph>, this allows you to install older versions as well.
          To enable downgrading, the desired version value must be specified by using the `pinned_version` field.
          If `allow_downgrades` is not provided or is set to <ph name="FALSE">false</ph>, downgrading is disabled for that IWA.
      pinned_version:
        type: string
        description: >-
          Specifies the desired version of the IWA. If provided, the system will attempt to install this specific version and subsequently block any further updates.
          To unpin the app and enable updates again, remove this field.
          **Important:** If the provided version does not exist, the IWA will get stuck on the currently installed version.
          This is because after trying (and it this case failing) to update to pinned version, pinning disables any further automatic updates.
    required:
    - update_manifest_url
    - web_bundle_id
    type: object
  type: array
tags: []
type: dict
