commit 50db9ed694122bd5763e5654b3f91916106ded19
author A Olsen <olsen@chromium.org> Tue Apr 16 16:51:03 2019
committer Commit Bot <commit-bot@chromium.org> Tue Apr 16 16:51:03 2019
tree ad18b674160365abbc116478f7ceb4488c277a62
parent 8c951a8285253b6205c0ae0bd2d2b9548c9ad0a7

A policy that controls how many days warning for SAML password expiry.

Not yet used anywhere.

Bug: 930109
Change-Id: I2ed80f10405b1c9b785f7d889e4a9d51308c2a81
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1569109
Reviewed-by: Roman Sorokin [CET] <rsorokin@chromium.org>
Commit-Queue: A Olsen <olsen@chromium.org>
Cr-Original-Commit-Position: refs/heads/master@{#651318}
Cr-Mirrored-From: https://chromium.googlesource.com/chromium/src
Cr-Mirrored-Commit: 5bc7b666472f31f52e556aea4055bfd24905b19d

resources/policy_templates.json

diff --git a/resources/policy_templates.json b/resources/policy_templates.json
index a43dc7f..7336e3b 100644
--- a/resources/policy_templates.json
+++ b/resources/policy_templates.json
@@ -15457,6 +15457,32 @@
       If this policy is set, the user cannot change or override it.''',
     },
     {
+      'name': 'SamlPasswordExpirationAdvanceWarningDays',
+      'type': 'int',
+      'schema': {
+        'type': 'integer',
+        'minimum': 0,
+        'maximum': 90
+      },
+      'supported_on': ['chrome_os:76-'],
+      'future': True,
+      'tags': [],
+      'features': {
+        'dynamic_refresh': True,
+        'per_profile': False,
+      },
+      'example_value': 14,
+      'id': 555,
+      'caption': '''How many days in advance to notify SAML users when their password is due to expire''',
+      'desc': '''This policy has no effect unless SamlInSessionPasswordChangeEnabled is true.
+      If that policy is true, and this policy is set to (for example) 14, that means SAML users will be notified 14 days in advance that their password is due to expire on a certain date.
+      Then they can deal with this immediately by doing an in-session password change and updating their password before it expires.
+      But, these notifications will only be shown if password expiry information is sent to the device by the SAML identity provider during the SAML login flow.
+      Setting this policy to zero means the users will not be notified in advance - they will only be notified once the password has already expired.
+
+      If this policy is set, the user cannot change or override it.''',
+    },
+    {
       'name': 'DeviceAdvancedBatteryChargeModeEnabled',
       'type': 'main',
       'schema': { 'type': 'boolean' },
@@ -15823,5 +15849,5 @@
   },
   'placeholders': [],
   'deleted_policy_ids': [412],
-  'highest_id_currently_used':  554
+  'highest_id_currently_used':  555
 }