It's enabled upon enrollment if you enable "Ensure SSH is enabled" under Settings > Global Management > User-initiated enrollment.
Jamf Remote uses it to push packages so if you use that you'll need remote login. My understanding is that Self Service is a "pull" rather than a "push" and doesn't require SSH.
