Stolen device protection and MDM.

I provide level 1 IT support for the company I work for and they use Microsoft Intune for MDM for salaried employees.

The software allows them to get their company email, respond to MS Teams chats, use Salesforce Mobile, and make calls and text with customers using the CellTrust app.

Since Apple provided the Stolen Device Protection feature it causes problems when someone tries to set up Microsft Intune on their phones.

When the caller gets to the step where the device profile is installed, SDP will make them do the face ID and then wait the 1 hour for the second verification.

We have received calls back that even after waiting the 1 hour and doing the second Face ID verification, they cannot continue.

I work for a bank and a lot of the callers are what you would call "Electronically challenged". Asking if they have SDP on seems to result in confusion and frustration.

I tell people to turn it off, complete the Intune setup and then turn it back on.

The company I work for is not the only organization that uses Microsoft Intune.

Are there no ways to fix this problem?