Hi all,

we're enrolling Android Enterprise devices with managed Google Accounts (Google domain enrollment type) on MobiControl SaaS 2026.0.1.1181. Enrollment completes fine and the managed account is added to the device as expected (Samsung tablet/phone, fully managed / Device Owner).

Afterwards, Google Play stays blocked: "Authentication is required. You need to sign in to your Google account" – retry just loops, no app installs possible. A persistent notification "Account action required user@ourdomain.com" only opens the MobiControl agent, with no dialog or action.

Ruled out so far:

• Two different managed accounts → same behavior; a personal Google account on the same device works fine
• Web login on PC works, no pending account actions, 2FA disabled for the test user
• EMM token correctly set in Google Admin Console, third-party Android management enabled for the whole OU

Has anyone seen this? Any pointers appreciated – thanks in advance!