GitLab

During signin, the cryptohome migration flag is automatically set for
Active Directory user accounts, which makes their cryptohome id switch
from email to account id key.

This is problematic for tests that populate policy before signin by
sending policy to Session Manager since the policy is 'addressed' using
the cryptohome id, see e.g.
https://chromium-review.googlesource.com/c/chromium/src/+/1145319/2/chrome/browser/chromeos/policy/affiliation_test_helper.cc#122
In a nutshell, policy is stored using the email address, but later
loaded using the account id key.

To resolve this, ACTIVE_DIRECTORY now always uses the account id key as
cryptohome id. This fixes the issue and should make the code more
robust.

BUG=chromium:839352
TEST=Verified that the hack in the CL above isn't necessary anymore.

Change-Id: I3ecb378aac08fc8dc5374e7bc170a9eb2c96741d
Reviewed-on: https://chromium-review.googlesource.com/1055509Reviewed-by: Alexander Alekseev <alemate@chromium.org>
Reviewed-by: Roman Sorokin <rsorokin@chromium.org>
Commit-Queue: Lutz Justen <ljusten@chromium.org>
Cr-Commit-Position: refs/heads/master@{#582525}