While predominately offering new consumer-focused features, the forthcoming Android 16 release also brings a series of security and management improvements for the enterprise.
Device Management Enhancements
Android 16 introduces several enterprise-focused features designed to enhance security, device management, and user experience in corporate environments.
Faster, Simplified Device Setup
Android device setup has been streamlined to reduce the number of steps, enabling faster deployment for teams. This improved provisioning process also enhances reliability by minimizing account-related issues during initial enrollment, helping IT teams get devices up and running more smoothly.
Work Profile enrollment (BYOD)
Fully Managed device (COPE/COBO)
Enhanced Zero-Touch Customer Portal
The Zero-Touch (ZT) Customer Portal now offers enhanced oversight through detailed audit logs, giving organizations greater transparency into device provisioning activities. Additionally, new admin roles with granular access permissions are coming soon, enabling more precise delegation and management of administrative tasks across teams.
Device EIDs Collection for eSIM Provisioning
Managing eSIM becomes easier with the ability to collect Embedded Identity Document (EID) values directly from your entire device fleet, including both corporate-owned and BYOD devices. This capability enables seamless and automated eSIM provisioning through your UEM solution, while giving end users on personal devices control over activating and deleting their eSIM profiles.
5G Network Slicing with Android Management API (AMAPI)
To address network congestion and ensure reliable connectivity for critical business applications, Google now supports 5G network slicing through AMAPI integration. This technology allows organizations to allocate dedicated virtual slices within the 5G network, optimizing resource access and enhancing overall performance for priority apps. By leveraging 5G slicing, enterprises can maintain smoother, more consistent network experiences even during peak usage periods.
Support for Android App Bundles (AAB)
Managed Google Play now supports Android App Bundles (AAB), making it easier for organizations to deploy private apps to employees efficiently.
Security and Privacy Upgrades
Device Trust
Google is enhancing Android’s role in enterprise security by making over 20 Android-specific device signals available across both managed (COPE, COBO) and unmanaged (BYOD) devices through AMAPI. These signals integrate directly with key components of an organization’s security infrastructure, including EMM/UEM platforms, identity providers (IdPs), EDR/MTD solutions, and SIEM tools—to provide real-time insight into device trustworthiness.
This deeper visibility empowers IT and security teams to make informed access decisions before allowing devices to connect to sensitive corporate resources. Early integrations include industry leaders such as CrowdStrike, Okta, Omnissa, Urmobo, and Zimperium, paving the way for more dynamic and context-aware access controls across Android environments.
This enables IT admins to assess a device’s trust level in real time before granting access to corporate resources. Initial integrations include CrowdStrike, Okta, Omnissa, Urmobo, and Zimperium.
Advanced Protection
Building on the foundation of Google’s Advanced Protection Program, the latest enhancements bring a broader set of security features designed to safeguard users against online threats, malicious apps, scam calls, and unsafe websites. A key addition is the AdvancedProtectionManager API, which enables apps to check if a user is enrolled in Advanced Protection and apply tighter security controls—such as mandatory screen locks and screenshot blocking—when necessary.
List of Advanced Protection features
Identity Check
To help prevent threats like shoulder surfing and PIN theft, Android's new Identity Check feature adds an extra layer of security by requiring biometric authentication to unlock the device or access sensitive resources—but only when the user is outside of trusted locations.
This intelligent safeguard is available on:
- Devices running Android 16 or later
- Pixel devices with Android 15
- Samsung devices running One UI 7
Note: Identity Check must be activated individually by users, it cannot be enforced centrally by IT administrators.
Corporate Badges in Google Wallet
Employees can now add their corporate ID badges directly to their Android phones using Google Wallet. This feature enables secure and convenient access to NFC-enabled workplace buildings, streamlining entry while maintaining high security standards.
Access Point Name (APN) Overrides via AMAPI
Organizations can now define and enforce custom Access Point Name (APN) settings on managed devices using AMAPI. This capability gives IT teams greater control over how devices connect and use cellular data, ensuring optimized network usage and compliance with corporate policies.
Connectivity
Thread Networks
For corporate-owned devices (COPE, COBO), IT administrators have the option to disable Thread networks, a mesh network protocol designed specifically for Internet of Things (IoT) devices, offering greater control over device connectivity.
NFC Management
IT administrators can enable or disable the Near Field Communication (NFC) radio on managed devices. Additionally, administrators can restrict users from altering NFC settings, ensuring consistent security policies across the organization.
Availability
Android 16 (codename: Baklava) was officially released to the Android Open Source Project (AOSP) on June, 10th, with availability for Google Pixel devices on the same day; it will become gradually available on selected devices from OEM vendors in the coming weeks/months. 
Compatibility
Compatibility includes Google Pixel 6 and newer models, Samsung Galaxy S21 FE 5G and newer, Galaxy A16 and newer, Galaxy Z Flip 4 and newer, and more.
The team at ISEC7 can help with incorporating the new Android 16 for Enterprise into your pre-existing enterprise deployment to ensure all business and operational use cases are addressed. ISEC7 is your premier one-stop-shop for all your mobility and security needs, further shaping and improving efficiency in your digital landscape. Please feel free to contact us with any inquiries and we would be happy to assist you.
