diff --git a/roles/kerberize/tasks/main.yml b/roles/kerberize/tasks/main.yml
index aab5553..b117895 100644
--- a/roles/kerberize/tasks/main.yml
+++ b/roles/kerberize/tasks/main.yml
@@ -31,3 +31,11 @@
     - 'pref("network.negotiate-auth.delegation-uris", "{{ kerberize_uris | default(ansible_domain) }}");'
     - 'pref("network.negotiate-auth.trusted-uris", "{{ kerberize_uris | default(ansible_domain) }}");'
   when: firefox.stat.exists
+
+- name: kerberize chromium for sites in the local domain
+  copy:
+    dest: /etc/chromium/policies/managed/idam.json
+    content: |
+      {
+        "AuthServerAllowlist": "idam.steinbeis.schule"
+      }