Face-Man, I had the same issue, here is what one my sys admins figured out.
Apple School Manager needs to be involved.
The student device needed to be a shared device with a managed apple id, you have to signin to the device with the apple managed ID.
The teacher device does not need to be a managed device.