UserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36

Steps to reproduce the problem:
1. Set up web filter with single sign on so we get student reporting for web filtering on Chromebooks.

2. Try to use Single App Kiosk mode as explained under Scenario 1 here  https://support.google.com/chrome/a/answer/3273084?hl=en#1

3. App shows up in lower left of login screen on Chromebook.  When clicked on, instead of app launching, the user is presented with google login prompt.

What is the expected behavior?
In this single app kiosk mode, the app should just launch.

What went wrong?
Our web filtering company (iboss) has said they're trying to work with google on this for months.  The problem (as best as I can understand it) is that there is no way for them to not try to authenticate the user when in kiosk app mode.  

I think the filtering companies need some hooks added to know if Kiosk (or kiosk app mode) is enabled.

If I turn off single sign on (district wide) in the web filter, kiosk app mode works like it should.  We need the single sign on, so in case of emergency should there be a bomb threat or something, surfing can be traced to the user.  

It's a shame to lose out on the interesting kiosk options  because we need that reporting enabled.

Did this work before? No 

Chrome version: 52.0.2743.116  Channel: n/a
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: Shockwave Flash 22.0 r0