Intune Compliance Policy: Device not compliant because of missing machine risk score: deactivated?

I am having a very similar issue.   On my Device compliance policy I am showing "Require the device to be at or under the machine risk score" as not compliant.  The device appears to be onboarded but is now showing up in the Windows Defender Security Center Portal.  Only machines I have onboarded manually with a script appear there.  I have gone through the Intune - WDATP onboarding instructions located here https://docs.microsoft.com/en-us/intune/advanced-threat-protection several times and everything seems to be set correctly.  If I look on the device WDATP shows that there are no threats and no action needed.  Why is the device not showing up in the console and why am I getting the compliance issue?