This article explains setting up a Cloudpath Enrollment System SCEP certificate generation with Intune for Android devices, there is a document which covers all the Intune related integration except Android, which is a concern of a lot of our customers.
NOTE: This article specifically covers SCEP cert generation.
>Configure https based SCEP url, default url is http, but https is also supported. >In the Root Certificate map Root certificate not Intermediate(which is the other difference between other type of SCEP profiles).
Rest of the Profile (Trusted Certificates and Wifi profiles) are similar to other devices based on document.