Glossary
Kiosk Mode
Kiosk mode configures a device to allow only a narrow, predetermined set of actions, regardless of who happens to be using it at the time — a public terminal, a shared retail device, a lobby check-in screen. The device itself becomes part of the access-control boundary: even a fully authenticated, legitimate user operating the device can't exceed what the kiosk configuration permits, because the restriction isn't tied to who's logged in at all.
This inverts the usual assumption that access control is primarily about the account, not the device — on a shared device intended for anonymous or rotating use, the device's own restrictions have to carry weight independent of any session or account, because the device may never have a stable notion of a single, persistent user to authenticate in the first place.