Device policy for LoginApps.

components/policy/resources/policy_templates.json

Index: components/policy/resources/policy_templates.json
diff --git a/components/policy/resources/policy_templates.json b/components/policy/resources/policy_templates.json
index 92e298de6c4884078781f7bfa371a56f4e0a4614..f1970b5489432aacff97e31d2c0cd5e800d1030f 100644
--- a/components/policy/resources/policy_templates.json
+++ b/components/policy/resources/policy_templates.json
@@ -137,7 +137,7 @@
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 334
+#   For your editing convenience: highest ID currently used: 335
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
@@ -8530,6 +8530,52 @@
       allowed.'''
     },
     {
+      'name': 'LoginApps',
+      'type': 'list',
+      'schema': {
+        'type': 'array',
+        'items': { 'type': 'string' },
+      },
+      'supported_on': ['chrome_os:54-'],
+      'device_only': True,
+      'features': {
+        'dynamic_refresh': True,
+      },
+      'example_value': ['gbchcmhmhahfdphkhkmpfmihenigjmpp;https://clients2.google.com/service/update2/crx'],
+      'id': 335,
+      'caption': '''Configure the list of installed apps on the login screen''',
+      'tags': ['full-admin-access'],
+      'desc': '''
+      Specifies a list of apps that are installed silently on the login screen,
+      without user interaction, and which cannot be uninstalled.
+      All permissions requested by the apps are granted
+      implicitly, without user interaction, including any additional
+      permissions requested by future versions of the app.
+
+      If an app that previously had been force-installed is removed from
+      this list, it is automatically uninstalled by <ph name="PRODUCT_NAME">$1<ex>Google
+      Chrome</ex></ph>.
+
+      Each list item of the policy is a string that contains an extension ID
+      and an "update" URL separated by a semicolon (<ph
+      name="SEMICOLON">;</ph>). The extension ID is the 32-letter string
+      found e.g. on <ph
+      name="CHROME_EXTENSIONS_LINK">chrome://extensions</ph> when in
+      developer mode. The "update" URL should point to an Update Manifest
+      XML document as described at <ph
+      name="LINK_TO_EXTENSION_DOC1">https://developer.chrome.com/extensions/autoupdate</ph>. Note
+      that the "update" URL set in this policy is only used for the initial
+      installation; subsequent updates of the extension employ the update
+      URL indicated in the extension's manifest.
+
+      For example, <ph
+      name="EXTENSION_POLICY_EXAMPLE">gbchcmhmhahfdphkhkmpfmihenigjmpp;https://clients2.google.com/service/update2/crx</ph>
+      installs the <ph name="EXTENSION_POLICY_EXAMPLE_EXTENSION_NAME">Chrome
+      Remote Desktop</ph> app from the standard Chrome Web Store "update"
+      URL. For more information about hosting extensions, see: <ph
+      name="LINK_TO_EXTENSION_DOC2">https://developer.chrome.com/extensions/hosting</ph>.''',
+    },
+    {
       'name': 'AllowScreenLock',
       'caption': '''Permit locking the screen''',
       'desc': '''Permit locking the screen.