InformationThis recommendation pertains to the amount of time after the device has been locked that it may be unlocked without entering a passcode. Devices with TouchID enabled do not allow a grace period.
Configuring the Maximum grace period for device lock to Immediately precludes unauthenticated access when waking the device.
SolutionOpen Apple Configurator.
Open the Configuration Profile.
In the left windowpane, click on the Passcode tab.
In the right windowpane, set the Maximum grace period for device lock to Immediately.
Deploy the Configuration Profile.