Chrome Device Token API Overview

Overview

Users could use third-party Identity Provider (IdP) to log into ChromeOS devices. Users could change their password through IdP's website. When users change password, ChromeOS devices would need to ask user to re-type their password on the ChromeOS device to re-encrypt their local data partition. Today, user are only prompted to re-type their password when they log into ChromeOS device next time. There could be significant delay between user changes their password on IdP website and user logs into their ChromeOS device. User may have forgotten the fact that they have changed their password.

Chrome Device Token API allows IdP to notify ChromeOS devices that users have changed their password. ChromeOS devices should then prompt users to re-type immediately so that users are more likely to type the correct password. This would provide a better authentication experience for users on ChromeOS devices.