Users will log in with a corporate Office 365 or Azure AD credential to enroll their device, and the policies will be pushed to the device. Policies can include:
* Automatically creating a user's email profile.
* Setting up a VPN to connect to corporate resources.
* Setting up Wi-Fi profiles.
Corporate SSL certificates and apps are also available for deployment. You can use managed app configuration policies to add more constraints to your apps.
