Enforcing device certificates for Exchange Outlook Anywhere?

Hello,

We currently are running 11.5.4 but most likely upgrading to 12.1.2 soon. We are in the process of installing Exchange 2016 on prem and the business wants to lock down Outlook Anywhere access to only corporate devices. It seems the easiest way to accomplish this is to install a client certificate on corporate devices. I have tested client certificate on the client SSL profile and this seems to work for browsers, but not the Outlook. It seems Outlook doesn't present the client certificate. Is this something that APM or another module could help with or is this a limitation of the Outlook client itself?

Thanks, Steve