The following setting changes fixed the issue in my case (works on Cisco APs, but I guess it’s the same for others if configuration is possible):
If using PSK:
Set FT to “Enabled”
Enable PSK and FT+PSK under WLAN configuration
If using dot1x:
Set FT to “Enabled”
Enable dot1x and FT+dot1x under WLAN configuration
This compatibility issue was triggered by the introduction of support for Adaptive FT for Android in 8.10/16.12.1. (The “DEO_IE”.) Some Android 10 clients have a bug wherein, if they encounter a “DEO_IE”, they fail to attempt to associate.
See full article here (login required):
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu24770