Bastion enrolment endpoint