Fido2 key and their issues using them on Android
First, do Android support using Fido2 keys on Android? Yes, it does support both using bluetooth, NFC and USB authentication. For reference: https://developers.google.com/identity/fido/android/native-apps But does it mean that it is straight forward to use it in a enterprise environment without hiccups? No, the support lacks many features that both Windows and iOS has supported for long time. If I buy a modern Fido2 with OTP support, will it work straight out of the box for using the USB? No, you need to disable the OTP support first. Here is how you can do that from yubikey manager, this works for Yubikey. Other vendors might have something similar. But for Fido2 keys without OTP support, it should work out of the box for USB-C, like Google titan. Why this happens, dont know. Can we use NFC for Entra ID authentication like we can on Windows and iOS? No. Android does not currently support CTAP2 for NFC, only for USB-C input. CTAP1 (FIDO U2F) supports certificate based authentication, but CTAP supports user verification with PIN and biometrics. Entra ID requires UV (user verification) before accepting login. As far as I know, there is also support for bluetooth. But I dont have any fido2 keys that support bluetooth yet. So why does this matter? With Android you can have shared devices with secure login for multiple users with a single log in for all supported apps, auto log off and many other possibilities. https://learn.microsoft.com/en-us/entra/identity-platform/msal-shared-devices Other sources/discussions: https://www.reddit.com/r/yubikey/comments/1oncuh2/whats_the_point_of_nfc_on_android/ https://www.reddit.com/r/yubikey/comments/13tlzoc/fido2_inconsistent_across_windowsandroid/ https://fidoalliance.org/specifications/
How Can I enroll android tv with android api management?
I'm trying to make a basic MDM service for Android TV. In the beginning, I was testing everything on an Android phone, but when I started working with TV, I realized that TV devices are not supported by "Android Management API". I know that I'm not the first person who asked a similar question, but there was only one answer pointing out that it's not possible https://support.google.com/work/android/thread/158930652/how-can-i-enrollment-android-tv-with-android-api-management?hl=en Maybe something has changed recently and now there is a solution.
Google assistant with work account
Hi everyone, We're setting up Android Auto on fully managed devices through Android Enterprise, but we've run into an issue. When using the voice assistant to make calls, it fails because Google Assistant seems to require signing in with a personal account. Unfortunately, since we block personal Google accounts, our users can't log in, which prevents this functionality from working. Has anyone encountered this issue before? Are there any solutions that don't involve enabling personal Google account login? Thanks in advance for your help!
Facing problem while getting Network & Security Logs for profile owner app.
The project I am working on is a Profile Owner Application. I want to get the Network logs. I have successfully enabled the NetworkLogging and checked the Network logging enable status by isNetworkLoggingEnabled() and setNetworkLoggingEnabled() methods. Now I want to get the network logs using the retrieveNetworkLogs() method. which requires the parameter "batchToken : Long." I have tried several ways to get the batchToken but have failed to get it. Now, I want your kind opinion on how to get the batchToken value and solve this problem by calling the retrieveNetworkLogs() method. Thank you for your time.
