Right now, the SAML flow gets triggered during ARC account provisioning. This has several disadvantages:

- It automatically pops up a window after after about 11 seconds (on Chell). This is undesirable form a UX standpoint.
- It is bound to the ARC provisioning timeout (~3 minutes). If the user hasn't entered their credentials, an error screen is shown.
- If we move to Dasher accounts, we need the token before and independently of ARC.

Goal:
- Separate enrollment token fetch logic from ARC account provisioning.
- Run enrollment token fetch before ARC provisioning starts, during OOBE.
- Move UI out of ARC support and into OOBE.
- Use proper OOBE styling (currently uses hacked styling in ARC support).
 

Right now, the SAML flow gets triggered during ARC account provisioning. This has several disadvantages:

- It automatically pops up a window after after about 11 seconds (on Chell). This is undesirable form a UX standpoint.
- It is bound to the ARC provisioning timeout (~3 minutes). If the user hasn't entered their credentials, an error screen is shown.
- If we move to Dasher accounts (see Chromad Tier 2.0), we need the token before and independently of ARC.

Goal:
- Separate enrollment token fetch logic from ARC account provisioning.
- Run enrollment token fetch before ARC provisioning starts, during OOBE.
- Move UI out of ARC support and into OOBE.
- Use proper OOBE styling (currently uses hacked styling in ARC support).