To use Google Factory Reset Protection, you'll need your Google account ID.
First, visit the Google Developers page. You should be directed to the get > Method: people.get article.
Locate the right-side panel and click on Try It.
Then click the Execute button.
Sign in to a Gmail account. This doesn't necessarily need to be the same Google account you used to set up EMM, but should be an account that's easily accessible to anyone who needs to use the device. For example, a technician may need to use this account if performing a factory reset in the field.
Then allow the Google APIs Explorer permissions.
A response will appear beneath the Execute button. Locate the "id" field and copy the value.
Once copied, log in to the Esper console.
Entering this ID under the Factory Reset Protection section on a template, compliance policy, or blueprint will prompt the user to log in with a Google account after a factory reset.
Your Google account is now associated with the device. As a result, an unauthorized user won't be able to factory reset the device and use it without access to your Google account.
On the Device
Once your device is factory reset, you will see the following screen on boot. Enter the email account corresponding to the Google Account ID, and the device will unlock.
An unauthorized user cannot get through this security feature which protects the device against an unauthorized factory reset.