Hello,
Thank you for your message.
You can enable Internet-ID connection along with Direct connection on your Hosts at the same time and also set up
multiple authentication methods, so if one of the authentication methods is not available, the software will automatically proceed with the next one. You can see an example of the auth methods order on
this page (see the text in the yellow frame).
Is it possible to enroll the Agent like the Host via GPO etc.?
Agent doesn't require installation, so it's not possible to push-install it via GPO, but you can
configure a custom Agent file and distribute it over the computers in your network, so it's readily available to just launch it on demand.
Hope that helps.