Intune Device Authentication Flow

Microsoft gives me the option to enroll a device only to Intune: If I enroll the device to Intune a device certificate is created in the certificate store: This certificate is signed by...