Apple DEP and Sophos Mobile / Sophos Central

Assistance with DEP

 

We are trying to clean up our DEP environment and move future iOS devices to DEP as well. We noticed without Active Directory sync,  it’s the users Sopohs Central credentials which authenticate against a DEP device.  This is fine for my IT department who uses Sophos central on a daily basis. But what about for my regular employees.

 

We use Sophos central for AV and they have their domain users attached to Sophos because of that but what’s the best way to get them setup on a DEP iOS device? What credentials should they use to authenticate?

 

Or alternatively should it be someone with Sophos credentials like myself getting through the initial DEP  “device owned by” screen and then handing it over to the end user when its time to login with an Apple ID?

 

Thanks!