The Device Enrollment Program (DEP) is an Apple programme to deploy company-owned iOS devices.

Setting Up the Device Enrollment Program

Setting up the requires the manager to have modification privileges.

Navigate to Organisation→Organisation and select the Device Enrollment Program tab.
Click Initialise Device Enrollment Program. This automatically creates a DEP certificate and a public key.
Download the public key by clicking Download public key
Sign it to Apple's DEP portal at https://deploy.apple.com/
From the main menu, select Device Enrollment Program→Manage Servers
Click Add MDM Server
Select name for the MDM server. The name is displayed in the DEP tab.
Click Next
Upload the public key that you downloaded to the service
Click Next
Download server tokey to your local computer
Upload the token to the admin portal by clicking Upload server token
Click Finish

Operating

Enrolling DEP devices requires creating at least one profile. You can create a new profile by:

Click Add above the profile list
Fill the dialog
Save the profile
At the bottom of the view, find the list of all devices added to the DEP service
Select the devices (select all by right-clicking and selecting Select All)
Click Define profile to associate a profile with the selected devices

Now the DEP setup can be started from the device itself.

Additional Settings

Once DEP is configured, devices (Devices→Inventory) and device templates (Devices→Templates) have a new Device Enrollment Program section in the device settings.

You can configure DEP further by defining IMEI code, serial number, or custom template for the device. With these settings, you can define which device in the inventory is paired with which DEP device.

You can define a custom pattern in the Template/Mapping field. The pattern is used for matching against the Template and Mapping fields in the DEP device listing.NEEDS CHECKING

Active Directory Integration

Error Messages