caption: Limit the time for which a user authenticated via SAML can log in offline
desc: |-
  During login, <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> can authenticate against a server (online) or using a cached password (offline).

        When this policy is set to a value of -1, the user can authenticate offline indefinitely. When this policy is set to any other value, it specifies the length of time since the last online authentication after which the user must use online authentication again.

        Leaving this policy not set will make <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> use a default time limit of 14 days after which the user must use online authentication again.

        This policy affects only users who authenticated using SAML.

        The policy value should be specified in seconds.
default: 1209600
example_value: 32
features:
  dynamic_refresh: true
  per_profile: true
owners:
- file://components/policy/OWNERS
- bartfab@chromium.org
schema:
  minimum: -1
  type: integer
supported_on:
- chrome_os:34-
tags: []
type: int
