Certificate Authentication on IPAD

No, I'm not getting prompted for a cert. It's just failing to log-in on the iPad. When I look at the logs, it's following the ODCA fallback route. I have the ODCA set to request also.

So, I have the MDM profile on the iPad that is pushed down by JAMF Pro. I also took the root cert from JAMF Pro and added that cert to the APM.

I suspect I have something configured wrong but I'm struggling to identify what.

Thanks for your assistance.