Hello,
We would like to start utilizing the return to service app however I am unsure how to scope our deployment network. 
Our network is cert. based so we have a temp network we use to get the devices online to get their configs and then we manually forget that network. I have return to service configured up to the point of getting that deployment network. What would be a scope I could use for these to have them only have the network loaded after return to service has ran? 
I did find the plist key to set a time for it to forget the network, just not sure on the scope for enrollment. 


Thanks in advance!

Dan