I set up a test phone with the certificate and installed the systems manager app.
Logged in using our test iCloud account of course.
Erased the device via the admin page.
Phone rebooted and was locked to that iCloud account. Fortunately, It was a test.
We have this happen a lot, users leave our company without signing out and we are left with bricked phones. Does MDM offer a solution to that?