How to setup user-authenticated enrollment?