Are you using Onboard?
I am using onboard for non-OSX devices (Android, iOS, ChromeOS, Linux)
I am also using SCEP enrollment via JAMF for Macs. (These work fine with the self signed cert)
Are you authenticating both corporate and non-corporate controlled devices
yes, managed macs and unmaged personal mobile devices
Are you pushing network profiles down to devices?
yes, via jamf and onboard