2. Blocking the use of personal Google profiles with Google Chrome (Complete) Okta has implemented a specific configuration option within Chrome Enterprise that prevents sign-in to Chrome on their Okta-managed laptop using a personal Google profile.

This is one of the simplest things to achieve but it gets so much pushback from C-level it's frustrating. I tried to push this, once the personal @gmail.com accounts got revoked all hell broke loose, despite being a clear security vulnerability. It also doesn't help that they have these "sync" features nowadays that re-download all the extensions you have on other devices so only god knows what type of malware you're letting into your environment.