Certificate Authentication on IPAD

I'm trying to do the same thing....allow iPads on our APM. But I want to control who is allowed to connect. Only corporate assets. We manage our iPads using JAMF Pro. I've tried following the info above with no such luck.

I have ODCA within the VPE and set to request, if successful, I move on to SAML authentication, otherwise it fails. And it's failing. I call myself setting the client SSL cert to ignore.

Please advise.