Fido2 key and their issues using them on Android
First, do Android support using Fido2 keys on Android? Yes, it does support both using bluetooth, NFC and USB authentication. For reference: https://developers.google.com/identity/fido/android/native-apps But does it mean that it is straight forward to use it in a enterprise environment without hiccups? No, the support lacks many features that both Windows and iOS has supported for long time. If I buy a modern Fido2 with OTP support, will it work straight out of the box for using the USB? No, you need to disable the OTP support first. Here is how you can do that from yubikey manager, this works for Yubikey. Other vendors might have something similar. But for Fido2 keys without OTP support, it should work out of the box for USB-C, like Google titan. Why this happens, dont know. Can we use NFC for Entra ID authentication like we can on Windows and iOS? No. Android does not currently support CTAP2 for NFC, only for USB-C input. CTAP1 (FIDO U2F) supports certificate based authentication, but CTAP supports user verification with PIN and biometrics. Entra ID requires UV (user verification) before accepting login. As far as I know, there is also support for bluetooth. But I dont have any fido2 keys that support bluetooth yet. So why does this matter? With Android you can have shared devices with secure login for multiple users with a single log in for all supported apps, auto log off and many other possibilities. https://learn.microsoft.com/en-us/entra/identity-platform/msal-shared-devices Other sources/discussions: https://www.reddit.com/r/yubikey/comments/1oncuh2/whats_the_point_of_nfc_on_android/ https://www.reddit.com/r/yubikey/comments/13tlzoc/fido2_inconsistent_across_windowsandroid/ https://fidoalliance.org/specifications/
How Can I enroll android tv with android api management?
I'm trying to make a basic MDM service for Android TV. In the beginning, I was testing everything on an Android phone, but when I started working with TV, I realized that TV devices are not supported by "Android Management API". I know that I'm not the first person who asked a similar question, but there was only one answer pointing out that it's not possible https://support.google.com/work/android/thread/158930652/how-can-i-enrollment-android-tv-with-android-api-management?hl=en Maybe something has changed recently and now there is a solution.
Impact of Google Scribe Changes on Samsung S-Pen Usability in Industrial Contexts
Hello, We have observed a significant change in S-Pen behavior following the integration of Google Scribe into Android 15 / 16 on our Galaxy Tab Active 5. Previously, the stylus allowed cursor movement (or select an write area) within text fields without triggering handwriting input. This was essential for our use case. Our technicians are working in proximity to high-voltage electricity and must wear protective gloves. The stylus is their only means of interacting with the tablet during operations. With the recent change, the stylus now immediately writes in text areas instead of moving the cursor, making it impossible to position the cursor without touching the screen with a finger (which is not feasible in our environment). Before with old firmware (Android 14): https://youtube.com/shorts/RXaPRRXaNcs?feature=share After with latest version of Android with Google Scribe (Android 15/16) : https://youtu.be/ZfKKCKcfxUc / https://youtube.com/shorts/EbuibT211lg This modification introduces a critical usability issue for industrial and safety-related workflows. Is there any documented workaround or configuration option to restore the previous behaviour (cursor movement without writing / select area)? If not, could this scenario be considered for future updates of Android? Thank you for your attention to this matter. Best regards,
Google assistant with work account
Hi everyone, We're setting up Android Auto on fully managed devices through Android Enterprise, but we've run into an issue. When using the voice assistant to make calls, it fails because Google Assistant seems to require signing in with a personal account. Unfortunately, since we block personal Google accounts, our users can't log in, which prevents this functionality from working. Has anyone encountered this issue before? Are there any solutions that don't involve enabling personal Google account login? Thanks in advance for your help!
Facing problem while getting Network & Security Logs for profile owner app.
The project I am working on is a Profile Owner Application. I want to get the Network logs. I have successfully enabled the NetworkLogging and checked the Network logging enable status by isNetworkLoggingEnabled() and setNetworkLoggingEnabled() methods. Now I want to get the network logs using the retrieveNetworkLogs() method. which requires the parameter "batchToken : Long." I have tried several ways to get the batchToken but have failed to get it. Now, I want your kind opinion on how to get the batchToken value and solve this problem by calling the retrieveNetworkLogs() method. Thank you for your time.
