caption: Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications.
desc: |-
  A list of origins of remote desktop client apps that may execute WebAuthn API
  requests that originate from a browsing session on a remote host.

  Any origin configured in this policy can make WebAuthn requests for Relying
  Party IDs (RP IDs) that it would normally not allowed to be able to claim.

  Only valid HTTPS origins are allowed. Wildcards are not supported.
  Any invalid entries are ignored.

  This policy only applies to affiliated users.

features:
  dynamic_refresh: true
  per_profile: true
  platform_only: true
supported_on:
- chrome.*:136-
- chrome_os:136-
- android:136-
example_value:
- https://remotedesktop.google.com
- https://vdi.corp.example
- https://server:8080/
owners:
- natiahlyi@google.com
- file://device/fido/OWNERS
schema:
  items:
    type: string
  type: array
tags:
- full-admin-access
type: list
