iOS and client server cert auth

We have a server in our DMZ and need to limit access to it to MDM enrolled phones/tablets.  Technically the vendor's app is used to connect to it by manually entering the server info.  The theory was...