Assigned
Status Update
Comments
ra...@google.com <ra...@google.com> #2
We have shared this with our product and engineering team and will update this issue with more information as it becomes available.
ed...@mention-me.com <ed...@mention-me.com> #3
Hi - I believe this issue spreads wider than just Intune. We're also seeing the same problem with Google Android Workspace management. We're not using a third party tool like Intune.
Users on Android 15 are unable to turn on Autofill for 1Password or Google Password Manager.
Two screenshots demonstrating the problem:
ed...@mention-me.com <ed...@mention-me.com> #4 Restricted
Restricted
ma...@gmail.com <ma...@gmail.com> #5
The same here: we're using Google Workspace Management and some users can't choose preferred service - error message is "Blocked by work policy".
dp...@foi.org <dp...@foi.org> #6
Having the same issue. Google Workspace managed device get error "Preferred service for passwords, passkeys blocked by work policy".
ed...@gmail.com <ed...@gmail.com> #7
Hey Google team, is there any further update on this issue? We've got more users using Android 15 now and it's very problematic that they can't use Autofill for third party password managers anymore.
cb...@kernelsol.com <cb...@kernelsol.com> #8
I am also seeing the same issue on all Android 15 devices, as well as Android 16 Beta 3.1. We are using Google Workspace for MDM.
ss...@b7f.se <ss...@b7f.se> #9
This is still an issue for me with Android 15 and have been for many, many months.
I also use Google Workspace for MDM.
I also use Google Workspace for MDM.
ma...@hallwaystudios.com <ma...@hallwaystudios.com> #10
This is making our lives a complete pain. We need the ability to use 1Password and there is no corresponding policy setting in the admin console to permit this. When will this be fixed?
pa...@gmail.com <pa...@gmail.com> #11
La combinaison d’Android 15 avec Intune et l’autofill désactivé montre l’importance croissante de la sécurité et du contrôle des données. Chez aluminium Tunisie https://www.etoiledecors.com , nous appliquons cette même rigueur dans notre travail en menuiserie aluminium Tunisie : chaque projet est pensé avec précision, en tenant compte des besoins réels et des contraintes spécifiques. Comme pour la gestion des appareils mobiles, notre priorité est de proposer des solutions fiables, durables et parfaitement adaptées. La sécurité et la qualité sont au cœur de toute expérience réussie, digitale ou architecturale.
em...@quantavia.net <em...@quantavia.net> #12
Any word on this being fixed?
Another 1Password and Google Workspace org here. We were just looking into upgrading our security settings to Advanced for our BYOD team members and encountered this bug during testing.
Another 1Password and Google Workspace org here. We were just looking into upgrading our security settings to Advanced for our BYOD team members and encountered this bug during testing.
Description
User can't enable any autofill service if device is Android 15 and device is enrolled with Intune MDM as dedicated device (It wasn't tested with fully managed configuration).
Same problem described here:https://www.androidenterprise.community/t5/admin-discussions/android-15-cannot-set-default-password-app/m-p/8827#M2105
Basically, there is not much to reproduce. Autofill apps are just disabled in settings picker screen (see screenshots).
We communicated with Microsoft about this issue and it looks like the problem is with device work policy enrolled by google DPC app:
{ "packageName": "com.imprivata.locker", "installType": "FORCE_INSTALLED", "lockTaskAllowed": true, "permissionGrants": [], "externalData":
{ "url": "", "sha256Hash": "" } , "managedConfiguration": "<hidden>", "disabled": false, "defaultPermissionPolicy": "PERMISSION_POLICY_UNSPECIFIED", "minimumVersionCode": 0, "keepPackageAfterUninstall": false, "delegatedScopes": [], "verifySignatureDisabled": false, "signingKeyFingerprintsSha256": [], "signingKeyFingerprintSha256FromPlay": "", "signingKeysFingerprintSha256FromPlay": [], "allowCrossProfileWidgetProvider": false, "connectedWorkAndPersonalApp": "CONNECTED_WORK_AND_PERSONAL_APP_DISALLOWED", "userControl": "USER_CONTROL_ENABLED", "extensionConfig":
{ "signingKeyFingerprintsSha256": [], "notificationReceiver": "" } , "alwaysOnVpnLockdownExemption": "ALWAYS_ON_VPN_LOCKDOWN_EXEMPTION_UNSPECIFIED", "enterpriseAuthenticationAppLinkConfigs": [], "workProfileWidgets": "WORK_PROFILE_WIDGETS_UNSPECIFIED", "credentialProviderPolicy": "CREDENTIAL_PROVIDER_POLICY_UNSPECIFIED", "customAppConfig": { "signingKeyFingerprintsSha256": [], "userUninstallSettings": "USER_UNINSTALL_SETTINGS_UNSPECIFIED"
Seems like credentialProviderPolicy by default is CREDENTIAL_PROVIDER_POLICY_UNSPECIFIED and it leads to app being permanently disabled as autofill service option according to this doc:https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#ApplicationPolicy.FIELDS.credential_provider_policy