This provides greater assurances that the identity in the certificate matches the identity associated with the Intune policy set forth for the device/user.