I have been able to accomplish the entire workflow below except for the very last item. I cannot find a way to automate the removal of a device PIN triggered by a user logging out of the Intelligent Hub. Any suggestions? I've been in contact with a peer who is accomplishing this, but I haven't been able to figure out what he did differently to achieve the PIN Reset results that I'm seeking.
iPhone 8, iOS 12.1.4 -- Workspace One UEM w/ Identity Manager -- Apple DEP Enrollment (Supervised)
This doesn't give me any comfort on-premise considering to upgrade to 1903 with bugs or wait for 1904 to be released for on-premise customers!