After spending time with both Jamf and Microsoft Support we finally
traced our issue to conditional access policies within Azure blocking
"Cloud Connector for Device Compliance". By excluding this within
Conditional Access we were able to get devices...