As the title says, I was wondering if anyone has been successful in creating enrollment policies for a specific app in Okta. Right now, when we give out devices to new colleagues, they will be enrolled in Kandji, where they have to authenticate with Okta. This is a problem when it happens on the phone as our enrollment policy requires the setup of okta verify which is impossible when they are setting up their phone for the first time. We would love to still have the requirement of okta verify needing to be set up, but it would be perfect if that enrollment policy were ignored when trying to authenticate against Kandji. I have tested a couple of different solutions, but ultimately it seems that I need to create a group for the enrollment policy, which is not the perfect solution since I would love to eliminate manual group administration. Has anyone found a good method to do this?