I have an Android passcode policy where Customized password complexity is enabled and Min Passcode Length is set to 6. Min password complexity is currently set to None.
On Samsung devices running Android 15 and Android 16, users can still set a 5-digit PIN. At first, passcode compliance showed a warning, but after setting the PIN, the device later showed as compliant in Hexnode.
The devices are enrolled manually by scanning the QR code, without authentication. This seems to happen on more than one Samsung device with the same policy applied. Is there something different about how Android 15/16 handles the minimum PIN length?