|
146 | 146 | }
|
147 | 147 | }
|
148 | 148 | },
|
149 |
| - "revision": "20230516", |
| 149 | + "revision": "20230530", |
150 | 150 | "rootUrl": "https://verifiedaccess.googleapis.com/",
|
151 | 151 | "schemas": {
|
152 | 152 | "Challenge": {
|
|
177 | 177 | "type": "object"
|
178 | 178 | },
|
179 | 179 | "DeviceSignals": {
|
180 |
| - "description": "The device signals as reported by Chrome.", |
| 180 | + "description": "The device signals as reported by Chrome. Unless otherwise specified, signals are available on all platforms.", |
181 | 181 | "id": "DeviceSignals",
|
182 | 182 | "properties": {
|
183 | 183 | "allowScreenLock": {
|
184 |
| - "description": "Value of the AllowScreenLock policy on the device. See https://chromeenterprise.google/policies/?policy=AllowScreenLock for more details.", |
| 184 | + "description": "Value of the AllowScreenLock policy on the device. See https://chromeenterprise.google/policies/?policy=AllowScreenLock for more details. Available on ChromeOS only.", |
185 | 185 | "type": "boolean"
|
186 | 186 | },
|
187 | 187 | "browserVersion": {
|
|
198 | 198 | },
|
199 | 199 | "crowdStrikeAgent": {
|
200 | 200 | "$ref": "CrowdStrikeAgent",
|
201 |
| - "description": "Crowdstrike agent properties installed on the device, if any." |
| 201 | + "description": "Crowdstrike agent properties installed on the device, if any. Available on Windows and MacOS only." |
202 | 202 | },
|
203 | 203 | "deviceAffiliationIds": {
|
204 | 204 | "description": "Affiliation IDs of the organizations that are affiliated with the organization that is currently managing the device. When the sets of device and profile affiliation IDs overlap, it means that the organizations managing the device and user are affiliated. To learn more about user affiliation, visit https://support.google.com/chrome/a/answer/12801245?ref_topic=9027936.",
|
|
244 | 244 | "type": "string"
|
245 | 245 | },
|
246 | 246 | "imei": {
|
247 |
| - "description": "International Mobile Equipment Identity (IMEI) of the device.", |
| 247 | + "description": "International Mobile Equipment Identity (IMEI) of the device. Available on ChromeOS only.", |
248 | 248 | "items": {
|
249 | 249 | "type": "string"
|
250 | 250 | },
|
|
258 | 258 | "type": "array"
|
259 | 259 | },
|
260 | 260 | "meid": {
|
261 |
| - "description": "Mobile Equipment Identifier (MEID) of the device.", |
| 261 | + "description": "Mobile Equipment Identifier (MEID) of the device. Available on ChromeOS only.", |
262 | 262 | "items": {
|
263 | 263 | "type": "string"
|
264 | 264 | },
|
|
376 | 376 | "type": "string"
|
377 | 377 | },
|
378 | 378 | "secureBootMode": {
|
379 |
| - "description": "Whether the device's startup software has its Secure Boot feature enabled.", |
| 379 | + "description": "Whether the device's startup software has its Secure Boot feature enabled. Available on Windows only.", |
380 | 380 | "enum": [
|
381 | 381 | "SECURE_BOOT_MODE_UNSPECIFIED",
|
382 | 382 | "SECURE_BOOT_MODE_UNKNOWN",
|
|
392 | 392 | "type": "string"
|
393 | 393 | },
|
394 | 394 | "serialNumber": {
|
395 |
| - "description": "The serial number of the device. On Windows, this represents the BIOS's serial number.", |
| 395 | + "description": "The serial number of the device. On Windows, this represents the BIOS's serial number. Not available on most Linux distributions.", |
396 | 396 | "type": "string"
|
397 | 397 | },
|
398 | 398 | "siteIsolationEnabled": {
|
|
407 | 407 | "type": "array"
|
408 | 408 | },
|
409 | 409 | "thirdPartyBlockingEnabled": {
|
410 |
| - "description": "Whether Chrome is blocking third-party software injection or not. This setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/?policy=ThirdPartyBlockingEnabled", |
| 410 | + "description": "Whether Chrome is blocking third-party software injection or not. This setting may be controlled by an enterprise policy: https://chromeenterprise.google/policies/?policy=ThirdPartyBlockingEnabled. Available on Windows only.", |
411 | 411 | "type": "boolean"
|
412 | 412 | },
|
| 413 | + "trigger": { |
| 414 | + "description": "The trigger which generated this set of signals.", |
| 415 | + "enum": [ |
| 416 | + "TRIGGER_UNSPECIFIED", |
| 417 | + "TRIGGER_BROWSER_NAVIGATION", |
| 418 | + "TRIGGER_LOGIN_SCREEN" |
| 419 | + ], |
| 420 | + "enumDescriptions": [ |
| 421 | + "Unspecified.", |
| 422 | + "When navigating to an URL inside a browser.", |
| 423 | + "When signing into an account on the ChromeOS login screen." |
| 424 | + ], |
| 425 | + "type": "string" |
| 426 | + }, |
413 | 427 | "windowsMachineDomain": {
|
414 |
| - "description": "Windows domain that the current machine has joined.", |
| 428 | + "description": "Windows domain that the current machine has joined. Available on Windows only.", |
415 | 429 | "type": "string"
|
416 | 430 | },
|
417 | 431 | "windowsUserDomain": {
|
418 |
| - "description": "Windows domain for the current OS user.", |
| 432 | + "description": "Windows domain for the current OS user. Available on Windows only.", |
419 | 433 | "type": "string"
|
420 | 434 | }
|
421 | 435 | },
|
|
470 | 484 | "CHROME_OS_VERIFIED_MODE",
|
471 | 485 | "CHROME_OS_DEVELOPER_MODE",
|
472 | 486 | "CHROME_BROWSER_HW_KEY",
|
473 |
| - "CHROME_BROWSER_OS_KEY" |
| 487 | + "CHROME_BROWSER_OS_KEY", |
| 488 | + "CHROME_BROWSER_NO_KEY" |
474 | 489 | ],
|
475 | 490 | "enumDescriptions": [
|
476 | 491 | "UNSPECIFIED.",
|
477 | 492 | "ChromeOS device in verified mode.",
|
478 | 493 | "ChromeOS device in developer mode.",
|
479 | 494 | "Chrome Browser with the key stored in the device hardware.",
|
480 |
| - "Chrome Browser with the key stored at OS level." |
| 495 | + "Chrome Browser with the key stored at OS level.", |
| 496 | + "Chrome Browser without an attestation key." |
| 497 | + ], |
| 498 | + "type": "string" |
| 499 | + }, |
| 500 | + "profileCustomerId": { |
| 501 | + "description": "Unique customer id that this profile belongs to, as defined by the Google Admin SDK at https://developers.google.com/admin-sdk/directory/v1/guides/manage-customers", |
| 502 | + "type": "string" |
| 503 | + }, |
| 504 | + "profileKeyTrustLevel": { |
| 505 | + "description": "Profile attested key trust level.", |
| 506 | + "enum": [ |
| 507 | + "KEY_TRUST_LEVEL_UNSPECIFIED", |
| 508 | + "CHROME_OS_VERIFIED_MODE", |
| 509 | + "CHROME_OS_DEVELOPER_MODE", |
| 510 | + "CHROME_BROWSER_HW_KEY", |
| 511 | + "CHROME_BROWSER_OS_KEY", |
| 512 | + "CHROME_BROWSER_NO_KEY" |
| 513 | + ], |
| 514 | + "enumDescriptions": [ |
| 515 | + "UNSPECIFIED.", |
| 516 | + "ChromeOS device in verified mode.", |
| 517 | + "ChromeOS device in developer mode.", |
| 518 | + "Chrome Browser with the key stored in the device hardware.", |
| 519 | + "Chrome Browser with the key stored at OS level.", |
| 520 | + "Chrome Browser without an attestation key." |
481 | 521 | ],
|
482 | 522 | "type": "string"
|
483 | 523 | },
|
|
488 | 528 | "virtualDeviceId": {
|
489 | 529 | "description": "Virtual device id of the device. The definition of virtual device id is platform-specific.",
|
490 | 530 | "type": "string"
|
| 531 | + }, |
| 532 | + "virtualProfileId": { |
| 533 | + "description": "The ID of a profile on the device.", |
| 534 | + "type": "string" |
491 | 535 | }
|
492 | 536 | },
|
493 | 537 | "type": "object"
|
|
0 commit comments