Okta FastPass Users Unable to Log In with Biometrics or PIN When One Lock Is Enabled on Android Managed Devices
Last Updated:
Overview
Android users operating within an Android work profile are unable to log in with biometrics or a Personal Identification Number (PIN) using Okta FastPass or Okta Verify Push when the work profile has One Lock enabled and the device is missing specific security updates. Installing the May 2025 or April 2026 Android Security Update resolves these authentication failures. The following authentication failures occur under these conditions:
-
Users cannot log in with biometrics when the work profile has One Lock enabled.
-
Users cannot use a PIN or passcode fallback instead of biometrics with Okta FastPass or Okta Verify Push. Google has marked this issue as fixed (Issue 375244071) and included the resolution in the April 5, 2026 Android Security Update.
Applies To
- Okta Identity Engine (OIE)
- Okta FastPass
- Okta Verify
- Android Work Profile
- One Lock
Cause
The Android work profile has the One Lock feature enabled, and the device lacks the May 2025 or the April 2026 Android Security Update.
Solution
How are the biometric and PIN login failures resolved in the Android work profile?
Install the required Android security updates or disable the One Lock feature for the work profile to resolve the authentication failures.
- Install the May 2025 Android Security Update on the device to resolve the biometric login issue.
- Install the April 2026 Android Security Update to use a PIN or passcode fallback instead of biometrics.
- Disable One Lock if installing the April 2026 Android Security Update is not possible.
