We have had an issue with Android devices trying to connect to our production WiFi all over the city. We setup 2 profiles; one for iPhones and one for Androids. We have setup the certificate for both. The certificate allows the device to connect to the WiFi. Without the certificate, the only other way is to join through the domain via Desktop/laptop. The iPhone is able to connect to the WiFi, but Android cannot. We have doubled check the certificate and the security settings and we seen that the Android phones receive the certificate, but it doesn't allow them to connect. It will prompt for a username and password. This is auto filled already via the certificate and the iPhones do not ask for the sign in. It connects automatically. 

Is there anyone that was able to connect their Android phones to their production WiFi when setting up the certificate and deploying it to the phones/tablets? We aren't using Knox. This is being pushed through ME MDM in the Management->Profiles section. 

I am adding screenshots of the setup and that the profile was sent successfully. Again, the phones receive the profile, but when connecting to the WiFi, it doesn't connect automatically. Still requires a sign in, which that certificate should have bypassed.