caption: Allow access to a list of URLs during authentication
desc: |-
  Setting the policy provides access to the listed URLs during authentication (e.g. in the login screen and lock screen), as exceptions to <ph name="DEVICE_AUTHENTICATION_URL_BLOCKLIST_POLICY_NAME">DeviceAuthenticationURLBlocklist</ph>. See that policy's description for the format of entries of this list. For example, setting <ph name="DEVICE_AUTHENTICATION_URL_BLOCKLIST_POLICY_NAME">DeviceAuthenticationURLBlocklist</ph> to <ph name="WILDCARD_VALUE">*</ph> will block all requests, and you can use this policy to allow access to a limited list of URLs. Use it to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths, using the format specified at ( https://support.google.com/chrome/a?p=url_blocklist_filter_format ). The most specific filter determines if a URL is blocked or allowed. The <ph name="DEVICE_AUTHENTICATION_URL_ALLOWLIST_POLICY_NAME">DeviceAuthenticationURLAllowlist</ph> policy takes precedence over <ph name="DEVICE_AUTHENTICATION_URL_BLOCKLIST_POLICY_NAME">DeviceAuthenticationURLBlocklist</ph>. This policy is limited to 1,000 entries.

  Leaving the policy unset allows no exceptions to <ph name="DEVICE_AUTHENTICATION_URL_BLOCKLIST_POLICY_NAME">DeviceAuthenticationURLBlocklist</ph>.
device_only: true
example_value:
- example.com
- https://ssl.server.com
- hosting.com/good_path
- https://server:8080/path
- .exact.hostname.com
features:
  dynamic_refresh: true
  per_profile: false
owners:
- cros-3pidp@google.com
- mgomezch@chromium.org
schema:
  items:
    type: string
  type: array
supported_on:
- chrome_os:117-
tags:
- filtering
type: list
generate_device_proto: False
