1. Set up 3rd Party management for Device management in Google Workspace
2. Create a token and copy it.
3. In the Dashboard under Organization / MDM, choose Google authentication and paste in the token.
Once that is done, when someone adds their work email to their phone, SM will download and install automatically. The end user will need to enroll the device so they will need the enrolment code.
There is currently a bug somewhere between Android / Meraki / Google Workspace that breaks this functionality in Android 11.