You enroll a Mac device into the Service using the Agent for Mac, which you download from the Identity Services...