Sorry meant to say IIS.
Built-in enpoint sync works just fine with JAMF as a context server. Also onboarding from our internal network works just fine:
-Devcice conects to our Guest Network
-Registers to JAMF (MDM) and gets profiles deployed
-JAMF gets a certificate for the device from CPPM
-Device conects to Production network via certificate
The issue is when the decive is onboarded from an outsite network like a hot-spot, JAMF is having an issue getting a certificate assiged by our ClearPass server for the client.