Office 365 rapid authentication and mobile device management CNAME DNS records are missing in subscriptions provisioned by Office 365 APS application:
enterpriseenrollment CNAME enterpriseenrollment.manage.microsoft.com. enterpriseregistration CNAME enterpriseregistration.windows.net. msoid CNAME clientconfig.microsoftonline-p.net.
Automatic creation of rapid authentication CNAME records were implemented in Office 365 application version 5.x and higher in scope of the internal request with ID APSA-4867. Mobile device management CNAME records were implemented in Office 365 APS application version 6.3 in scope of internal request with ID APSA-11855.
Consider to update to the latest Office version 365 application. Information about all releases of Office 365 APS applications can be found in K115460.