A quick overview of the scenario: macOS devices are managed by Jamf Cloud. SCEP certificates are deployed from a Microsoft CA via the Jamf proxy. A custom sync workflow creates an AD object for each Jamf-managed device and ISE looks at the cert CN to...