I've been using the require credentials during prestage enrollment to capture which users are assigned to my ipads but i need to disable this feature. I still would like the users assigned to the device but I need it done after the device is put back into jamf. One of the reasons I'm turning off requiring credentials is because if a device is lost or stolen it never goes back into the jss without valid credentials. I'm hoping to eliminate this problem by disabling this feature, but what is the best way to still get the user credentials added to the device? Has anyone locked their device to a single app mode app that required credentials to exit and then used smart device groups to move them out of single app mode?