Feature Request:  Provide a way for Chromebooks to automatically update users passwords on a Chromebook when updating their SSO password




Current recommendations in the Google Help Center below. 

- Using the Update API causes users in G-Suite confusion as mobile device are impacted and get invalid credentials when the update api call is used to update the password.
- Customers don't like having to set any passwords in Google if they are not used at all
- For ADFS its not clear if API Calls to Google can be made
- There are no notifications to tell a user that they need to change there password after X number of days.




See https://support.google.com/chrome/a/answer/6060880?hl=en
FAQs
After signing in with my SAML provider, I am prompted to re-enter my password. Is that normal?

Yes. This is necessary to allow offline access to your Chrome device and to be able to unlock it. We have an API that SAML vendors can implement to remove the need for this confirmation step.

If a user changes their password on another device, how do you make sure the Chrome device gets updated to unlock with the new password?

We recommend you use the simple update method on our Directory API which will notify our authentication server when a password is changed. Enter the password value in the Request body. If the API is not used, the password change will be detected at the next online login flow. By default, the Chrome device will force an online sign in every 14 days even if the password didn't change. You can change this period in the Admin console by going to Device Management > Chrome Management > User Settings > Single Sign-On Online Login Frequency.