adds section to directory sync and admonitions to device identity

Author: ZPain8464

content/docs/capabilities/device-identity.mdx

@@ -67,6 +67,14 @@ Enterprise users can build policies that only grant access to a route if a user
 
 The Enterprise Console’s **Manage Devices** GUI provides a dashboard where administrators can enroll devices and generate custom registration links for users in their directory.
 
+:::enterprise
+
+Before you can generate device registration links for users within your directory, you must sync your directory data first.
+
+See [**Directory Sync**](/docs/capabilities/directory-sync) for more information.
+
+:::
+
 To enroll a new device:
 
 1. In the Console sidebar, select **Devices**

content/docs/capabilities/directory-sync.mdx

@@ -55,6 +55,18 @@ The requirements and instructions for directory sync vary depending on the ident
 
 ## How to use directory sync
 
+### Directory data as policy criteria
+
 After a successful sync, directory data sourced from your identity provider will be available in the Enterprise Console. You can use this data as context in your authorization policies to control which users and groups can access upstream applications and services:
+  ![Using directory sync group data as criteria in the Enterprise Console PPL builder](./img/directory-sync/directory-sync-group-criteria.png)
+
+### Device enrollment
 
-![Using directory sync group data as criteria in the Enterprise Console PPL builder](./img/directory-sync/directory-sync-group-criteria.png)
+Administrators can generate custom device registration links for users within their directory:
+  ![Generating device registration links for users in the Enteprise Console](./img/directory-sync/device-enrollment.png)
+
+:::enterprise
+
+See [**Device Identity**](/docs/capabilities/device-identity) for more information on how to enroll and manage devices in the Enterprise Console.
+
+:::