When encountering a failed Apple MacOS device enrolment from the DEP program and using Workspace ONE UEM, it might be that there is an bug related to the intelligent hub from a deployment perspective. This was the case for my customer after a bulk enrolment of new devices out of the blue would be having issues, this was later confirmed in https://kb.omnissa.com/s/article/6000198 the solution for this in a future scenario would be to flip the released version of the hub to a last known state from a company/user perspective and when resolved flip it back to the most current version. This appears to only work for the MacOS side of things. iPhone etc. use the public app store and latest version which can’t be controlled this way.
Hope it helps.