Hello,

We have been using Okta with mobile devices without issue until now. An existing user with a new device (oneplus 6T with Android) installed Okta Verify and enrolled it as an MFA factor successfully. Then he installed Okta Mobile as he did with his previous device and went through the process of logging in, MFA, EULA, encrypting the device, etc.

After thinking for a while, Okta Mobile errors that his "device cannot be secured" with retry button. It has a pin code and fingerprint lock, which meets our device policies within Okta admin.

Here is the scary part...although his device is considered not secure and could not fully complete assimilation into our network, he has normal access as if it did. The device also does not show up in the admin device lists, although he is using the apps as he should be able to under a successful installation. I have no way to wipe or control the device from our admin panel, but yet he has full access to the android for work and okta mobile app store.

Is there some configuration setting that does not like something new versions of android do perhaps? This seems like an issue, because it is the first device we have tried to enroll that we cannot track.