The NHSmail Intune service allows onboarded organisations to Co-Manage devices with SCCM and Intune as well as connect to on-premises Certificate Issuing services for VPNs, Wi-Fi, etc.