Our customer currently uses 802.1x (without a certificate at the moment) for their wireless network.  When doing a QR code enrollment the only 2 network options are WPA and WEP, but there are no advanced options for setting the EAP method or the Phase 2 authentication settings.  Those settings are available in the individual policies though.

Does this mean that during enrollment we would have to join another non-802.1x network and then once the device successfully enrolls, wait for the policy to apply and join the correct 802.1x network for the client site?