Add policy that forces SAML users to log in online periodically

chrome/browser/chromeos/login/login_utils.cc

Index: chrome/browser/chromeos/login/login_utils.cc
diff --git a/chrome/browser/chromeos/login/login_utils.cc b/chrome/browser/chromeos/login/login_utils.cc
index 57df96531f530a6a7ba8eadc8d30877f4c6d45db..0862eacf300d7402223e65a6c4c023b7353724d2 100644
--- a/chrome/browser/chromeos/login/login_utils.cc
+++ b/chrome/browser/chromeos/login/login_utils.cc
@@ -43,8 +43,11 @@
 #include "chrome/browser/chromeos/login/oauth2_login_manager_factory.h"
 #include "chrome/browser/chromeos/login/parallel_authenticator.h"
 #include "chrome/browser/chromeos/login/profile_auth_data.h"
+#include "chrome/browser/chromeos/login/saml_offline_signin_limiter.h"
+#include "chrome/browser/chromeos/login/saml_offline_signin_limiter_factory.h"
 #include "chrome/browser/chromeos/login/screen_locker.h"
 #include "chrome/browser/chromeos/login/supervised_user_manager.h"
+#include "chrome/browser/chromeos/login/user.h"
 #include "chrome/browser/chromeos/login/user_manager.h"
 #include "chrome/browser/chromeos/settings/cros_settings.h"
 #include "chrome/browser/extensions/extension_service.h"
@@ -575,6 +578,13 @@ void LoginUtilsImpl::FinalizePrepareProfile(Profile* user_profile) {
   }
   btl->AddLoginTimeMarker("TPMOwn-End", false);
 
+  if (UserManager::Get()->IsLoggedInAsRegularUser()) {
+    SAMLOfflineSigninLimiter* saml_offline_signin_limiter =
+        SAMLOfflineSigninLimiterFactory::GetForProfile(user_profile);
+    if (saml_offline_signin_limiter)

[Nikita (slow), 2014/01/23 17:31:15]

When it can be NULL?

[bartfab (slow), 2014/01/24 12:56:07]

For incognito profiles. If they do not go through though this code path, I can
remove the check.

+      saml_offline_signin_limiter->SignedIn(user_context_.auth_flow);
+  }
+
   user_profile->OnLogin();
 
   // Send the notification before creating the browser so additional objects