Currently this part of the feature is a preference (default off) that enables the use of SmartLock to login into the Chromebook (not just unlock). We need an Enterprise policy such that SmartLock for unlock may be turned on but not SmartLock for login.
Comment 1 by jhawkins@chromium.org
, Jun 19 2018