We've got Boxer (v 5.12) set to get derived credentials from PIV-D (v 1.4.2). On newly setup phones with iOS 13 (doesn't matter which release) Boxer will not accept the keystore PIN we set in PIV-D. This is only on new setups - currently enrolled phones that upgrade to iOS 13 don't have the issue.
Here's the kicker, though: I've got 2 new setup phones for the same test user with identical iOS and app versions and one actually DOES work.
Weird, I know. Anyone seen this?