This is a great update, in one of two tenants that I have access to, Microsoft Intune is being force down which is great. It's letting us sign in but not register the device. I guess we just have to wait a bit longer and try again. I suspect it will likely be Thursday before we can get the device to register.
In the other Tenant, the switch over from Company Portal to Microsoft Intune is yet to happen, that's OK though, will just have to wait a bit longer.
Much like Steve_Prentice I'm making use of KME and tried with and without system apps which is working fine for us. Keeping the system apps enabled for the time being and hoping that we can "hide" or "disable" certain apps at a later date. Did test to see if usernames are passed through, but this is stated on this page as a known issue.
The devices are forced to follow the device compliance polices now during enrolment which is great and as a result having to set an alphanumerical passwords. I did have encryption enabled at first, but the device seemed to "hang forever" so have turned it off for the time being and will test later on this week again.
The required apps are installed after this and I need to double check but it looks like it's forcing the install of Microsoft Authenticator even though I haven't set this as required yet, will double check this again though.
I've started to look at the Samsung OEMConfig options but, I'm going to need more time to digest this.
Great update so far!