You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
New FeaturesKind: in v2.1.248,
New FeaturesSection of the release
What
When managed settings need review during sign-in, the login flow is released first and the enterprise-settings prompt is then revealed in a mode that refuses input for a moment, so a keypress left over from the login screen cannot instantly answer it. No flag is involved; this only happens when managed settings require consent during a login handoff.
Details
The consent request now carries a reveal mode of either login_handoff or default, chosen when the dialog is shown.
The login_handoff path turns on the input-refusal guard; the plain default path does not.
Internal holds keep other prompts from firing while the handoff is in flight.
Evidence
login_handoff
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
