caption: Blocklist of identity providers that cannot use Extensible Enterprise SSO for the browser

desc: |-
  Disable single sign-on using <ph name="EXTENSIBLE_ENTERPRISE_SSO_PRODUCT_NAME">Extensible Enterprise SSO</ph> for the listed identity providers.

  By adding the value <ph name="POLICY_VALUE_ALL">'all'</ph>, all supported identity providers for SSO are disabled.

  By adding the value <ph name="POLICY_VALUE_MICROSOFT">'microsoft'</ph>, support for single sign-on for Microsoft® cloud identity provider in Chrome is disabled.

  By leaving this policy unset, all identity providers that are supported by <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will be enabled.

  For identity providers that are enabled in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> and configured on the device the administrator, users who sign into their once using that identity provider, on any application that supports <ph name="EXTENSIBLE_ENTERPRISE_SSO_PRODUCT_NAME">Extensible Enterprise SSO</ph>, can be signed into web properties using that identity provider automatically. Information pertaining to the user's authencitation information is transmitted to the user's cloud identity provider for each authentication event.

  Notes:

  <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> does not support Single Sign-on using <ph name="EXTENSIBLE_ENTERPRISE_SSO_PRODUCT_NAME">Extensible Enterprise SSO</ph> in Incognito or Guest modes.

  <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> only supports Single Sign-on using <ph name="EXTENSIBLE_ENTERPRISE_SSO_PRODUCT_NAME">Extensible Enterprise SSO</ph> for the following identity providers: Microsoft, Okta.

  This feature is available starting in <ph name="MAC_OS_NAME">macOS</ph> 10.15.

owners:
- ydago@chromium.org
- ssolarewicz@chromium.org
- file://components/policy/OWNERS

supported_on:
- chrome.mac:135-

features:
  dynamic_refresh: true
  per_profile: false
type: string-enum-list
schema:
  items:
    enum:
    - all
    - microsoft
    - okta
    type: string
  type: array
items:
- caption: All identity providers
  name: all
  value: all
- caption: Microsoft® cloud identity provider
  name: microsoft
  value: microsoft
- caption: Okta® cloud identity provider
  name: okta
  value: okta
  supported_on:
    - chrome.mac:146-
example_value:
- all
tags: []
