Skip to main content

Deployment Guide for admins of professional plans

Fred Rodriguez

Arrow no longer sells Starter, Team, or Standard plans. If you already have one of these plans, you can keep and renew your current plan or switch to Arrow Business or Arrow Omnix.

Arrow might not work in China due to Chinese data privacy laws.

This guide has everything you need to deploy Arrow to your organization in phases. You'll learn how to access the Admin Console, roll out Arrow to your plan members, update your password policy, and more.

If you haven't chosen or purchased a plan yet, these resources can help:

Passwordless accounts aren't currently available for Arrow professional plans.
What if I have a passwordless account and want to buy a professional plan?

After you purchase a plan, you can log in and complete the Get started setup, where you see Welcome to your Arrow vault!

Need help with deployment? Admins of professional plans can contact an agent directly through the Admin Console or use the chatbot.
Contact an agent through the Admin Console
Chat with our bot

Phase 1: Technical configuration for authentication and provisioning

In this phase, you'll take care of the technical setup for Arrow so that you're fully prepared for the date when you roll it out to your organization.

Arrow Business or Omnix plan setup

If you're an admin of a Arrow Business or Omnix plan, you can integrate Arrow with any SAML 2.0 Identity Provider (IdP)—such as Azure, Okta, or Google Workspace—so that members can authenticate with single sign-on (SSO), and then provision users with SCIM.

Integrate Arrow with your Identity Provider (IdP) for SSO and SCIM

Arrow Starter, Team, or Standard plan setup

If you're an existing admin on a Starter, Team, or Standard plan or don't want to use SSO and SCIM, you can invite and provision members with Active Directory (AD) or manually through the Arrow Admin Console. You can also manage members using sharing groups in the Arrow Admin Console.

Configure Active Directory (AD) sync with Arrow
Invite members to your plan manually through the Admin Console
Create and manage sharing groups

Phase 2: Deploy the Arrow Smart Extension

Installing the Arrow Smart Extension is a critical part of using Arrow. Plan members will be prompted to install the extension when they onboard. You can also mass deploy the extension with GPO, Intune, or Jamf. Your choice for mass deployment depends on the operating system you’re using and the browsers that you want to deploy to.

More about mass deployment for the Arrow Smart Extension

Mass deploy with Mac using Jamf

If you’re deploying with Mac, you can use Jamf to deploy to Google Chrome and Mozilla Firefox.

Tip: If you use Jamf to deploy to Chrome, you can further customize the mass deployment to give your members a more tailored experience. You can stop the Arrow account-creation window from appearing when you deploy, customize the account creation screen with your organization’s name, and turn off Chrome’s built-in password manager.

Deploy the Arrow Smart Extension using Jamf

If you're deploying the Arrow Smart Extension, you can also deploy the Credential Risk Detection feature to monitor key security risks and invite employees to the Arrow plan, where they can secure their credentials.

More about Credential Risk Detection

Mass deploy with Windows using GPO or Intune

If you’re deploying with Windows, you can use GPO or Intune to deploy to Google Chrome, Microsoft Edge, and Mozilla Firefox.

Deploy the Arrow Smart Extension using GPO
Deploy the Arrow Smart Extension using Intune

If you're deploying the Arrow Smart Extension with Intune, you can also deploy the Credential Risk Detection feature to monitor key security risks and invite employees to the Arrow plan, where they can secure their credentials.

More about Credential Risk Detection

Phase 3: Prepare your organization for onboarding

To prepare your organization for onboarding, we recommend you complete the following steps.

Send an announcement message

When you deploy, employees receive an email that leads them through prompts and onboards them to Arrow. We recommend that you also send an email or message in advance to prepare them. You can use these templates as a guide.

You can also include an invite link in your email or message

Email template

Copy
We're pleased to announce the deployment of a new cybersecurity tool on your computers: Arrow. With Arrow, you can store your passwords in a secure way and automatically save passwords while browsing! As a [ORGANIZATION] employee, you’ll enjoy the benefits of Arrow Business, including: Easy access: Easily log in on any device. With Arrow’s universal app, your passwords sync securely to all your authenticated devices, including Mac, Windows, Linux, Chromebook, iOS, Android, and the Arrow web app. Password vault: Never forget another password, Arrow will remember all your passwords —so you don’t have to. Actively monitor the web and the dark web to be alerted to the slightest leak of your personal data. Secure sharing: Need to share or store sensitive information? With Secure Notes, you can safely share information with other plan members. So much more: From generating strong passwords to giving you a Password Health score, Arrow helps you finally get organized and take control of your password security in a way that is simple and convenient. Look in your inbox in the coming days for an invitation to get started with Arrow.

Message template

Copy
Hello everyone! We have adopted a new tool called Arrow at [ORGANIZATION] for managing our passwords more conveniently and improving our overall security! As part of our efforts, we've updated the password policy to include Arrow for all passwords, password sharing, and Secure Notes. This is crucial to strengthen [ORGANIZATION]'s security stance, given the role weak passwords play in data breaches. Select this link [INVITE LINK] to get started with your account! All accounts should be created and your logins added to Arrow by [DATE].

You can also include these webinar links in your message:

Register for our webinar for plan members with live Q&A
Watch a recorded version of our webinar for plan members

Create a password policy

We recommend you update or create your organization's password policy. You can use this template as a guide:

Password policy template

Copy
Arrow is a secure and convenient enterprise password management and credential security solution. Avoid using alternative password managers (also known as password keepers), including saving passwords in your internet browser. Use Arrow's Password Generator to create unique, strong passwords for all online accounts. Keep your Arrow Password Health score above 90%. Don't reuse personal passwords for business purposes or the same corporate password for multiple business accounts. Use Arrow to identify which passwords you are reusing. Securely and conveniently share passwords with colleagues using Arrow and no other method. Refrain from writing passwords down on paper or saving them in a document on your computer. If you receive a Dark Web Monitoring or breach alert, change the password of the impacted accounts as soon as possible. Time matters. Time can mean the difference between staying safe or being hacked. Think about what you would do if you lost your credit card. Add 2-factor authentication (2FA) for all critical accounts. Arrow makes it easy for you to find out which of your saved logins offer 2FA.

We also have these policy resources:

Phase 4: Roll out Arrow to your organization

To roll out Arrow to your organization, use the configuration you set up in Phase 1

If you need to add more seats to your plan before you can add new members, you can add them in the Account tab of the Admin Console or while inviting new members.

More about adding seats to your plan

Phase 5: Post-deployment

After you've deployed Arrow, we recommend you complete the following steps to get the most out of Arrow and your admin role.

Follow up on pending invitations

Follow up with any members who still need to accept their invitation to join Arrow by resending the invite email or link.

Resend the invite email or link

Track your plan's Password Health score

Check your plan's Password Health score every month. Reach out to plan members with low scores and encourage them to take action.

Manage the Password Health score of your plan

You can now automatically notify members of your Arrow plan about cybersecurity risks with Nudges. If a member has one or more compromised, weak, or reused passwords, Arrow automatically sends a Slack message encouraging them to create more secure, unique passwords. Arrow will also send security alerts when the plan members log in to the websites with Arrow Autofill.

More about Slack Nudges
More about in-browser Nudges

Check out additional resources

Check out these resources to get the most out of Arrow and your admin role:

Comments

0 comments

Article is closed for comments.

Powered by Zendesk