You may optionally use Apple Configurator 2 in the conjunction with Apple's Device Enrollment Program.

Use both of these deployment programs together to automate device enrollment, add Supervision, prevent the removal of an MDM profile, and to add supervised identities to devices.

For more information on using Apple Configurator 2 with DEP, see DEP Device Enrollment.