MalG Thank you for your feedback! That's a great point and we will edit the blog to highlight what you mention. For new profiles when selecting where users must authenticate during profile creation for an Automated Device Enrollment token, if Setup Assistant is chosen, it is recommended to Install the Company Portal. If choosing to authenticate with the Company Portal, nothing else needs to be done.
larsrigonan Thank you for your feedback. For new Automated Device Enrolled devices when creating a profile, if you choose to enroll with user affinity, we recommend you use the Company Portal for authentication. If using Setup Assistant, we recommend you install the Company Portal from the profile creation, and this is where you can set the 'Install Company Portal' setting to 'yes'. However for your existing profiles, we recommend you send down the Company Portal as a required app and target the same group(s) you have for your Automated Device Enrollment profile. In addition, send down the app configuration policy that is linked here - https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-use-ios#configure-the-company-portal-app-to-support-ios-and-ipados-dep-devices to the same group(s).