No one can figure this one out.
We are using Microsoft Intune to lock some phones (Samsung) to a single NFC scanning android application. Worked great using Android 9