"Allow Simple Passcodes" remains enabled on iOS devices

When the "Allow Simple Passcodes" option is unchecked in BigFix for iOS devices, the setting may still show as enabled because the policy does not explicitly set the `allowSimple` property to false. To resolve this, administrators must create and deploy a custom policy XML that explicitly sets `allowSimple` to false, ensuring the device reflects the intended restriction.

Problem:

When configuring an iOS Passcode Policy in BigFix and unchecking the "Allow Simple Passcodes" option, the setting on the managed iOS device still shows "Simple Passcodes Allowed = YES".

Cause:

By default, the `allowSimple` property for iOS passcode policies is set to `true` (enabled) as per Apple's device management specifications. The standard BigFix iOS Passcode Policy configuration, when "Allow Simple Passcodes" is unchecked, does not explicitly send a `false` value for this property in the payload. Consequently, the device retains the default `true` setting.

Workaround

To ensure "Allow Simple Passcodes" is set to "NO" on your iOS devices, you must explicitly configure the policy to send `false` for the `allowSimple` property.
  1. Prepare the Custom Policy XML: Create an XML file for your custom passcode policy. Ensure that the `allowSimple` key is explicitly included and set to `<false/>`. Sample payload snippet
        <!-- Passcode settings -->
    <key>allowSimple</key>
    <false/>
  2. Save and Deploy: Save the custom policy and then deploy it to your target iOS endpoints.
  3. Verification: On the deployed iOS device, check the passcode settings to confirm that "Simple Passcodes Allowed" is now set to "NO".