SOLVED: sending IsCompliant, IsKnown and IsManaged via SAML (SSO)

Background We have an EntraID (Azure/Microsoft365) SAML based VPN using the APM module and were keen to provide a different device pool to domain devices, rather than personal devices (BYOD).  We no...