GetToken for service type com.apple.maid is not working

I have created a jwt token with headers { 'typ': 'JWT', 'alg': 'RS256' }

and claim as :

{ 'iss': dep server UUID from Accounts call, 'iat': epoc time in seconds, 'jti': random uuid, 'service_type': 'com.apple.maid' }

And signed the token with private key created during DEP MDM server creation. On the device I see Verification error when tried to login with Managed Apple account. In ABM, Access management setting was set to Managed Devices /Supervised only. Any help would be appreciated.

GetToken for service type com.apple.maid is not working
 
 
Q