caption: Enable the <ph name="CHROME_ENTERPRISE_DEVICE_TRUST_CONNECTOR">Chrome Enterprise Device Trust Connector</ph> attestation flow for a list of URLs on the login screen
desc: |-
  Enable <ph name="CHROME_ENTERPRISE_DEVICE_TRUST_CONNECTOR">Chrome Enterprise Device Trust Connector</ph> for a list of URLs on the login and lock screen.

  Setting this policy specifies for which URLs <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> will offer to start the attestation flow. The latter allows those websites to get an attested set of context-aware signals from the device.

  Leaving this policy unset or empty means that no website will be able to start the attestation flow nor get signals from the device.

  This policy will only impact the attestation flow on the login and lock screen. To change the in-session attestation flow, please use the <ph name="CONTEXT_AWARE_ACCESS_SIGNALS_ALLOWLIST_POLICY_NAME">ContextAwareAccessSignalsAllowlist</ph> policy.

  For detailed information on valid <ph name="URL_LABEL">URL</ph> patterns, please see https://support.google.com/chrome/a?p=url_blocklist_filter_format.
device_only: true
example_value:
- https://example1.com
- example2.com
- https://foo.example3.com/path
features:
  cloud_only: true
  dynamic_refresh: true
owners:
- lmasopust@google.com
- cbe-device-trust-eng@google.com
schema:
  items:
    type: string
  type: array
supported_on:
- chrome_os:108-
tags: []
type: list
generate_device_proto: False
