Think I might be experiencing the same. Safari on MacOs keeps prompting for Microsoft Workplace Join Certificate and it seems to be ignoring the already configured identity preferences for https://device.login.microsoftonline.com and https://device.login.microsoftonline.com/. Clicking Continue in Safari creates a new identity preference for the same URL but appended with a long string of random characters. Can't figure out how to create a new ID preference that Safari will honor.