PENDING SCCM CMG Authentication

[JamesBowtell]

I have setup a CMG using PKI for authentication. All works but I want to understand what happens when the PKI client cert expires and the machine is not on the corporate network to recieve an updated pki client cert. Will the sccm client fallback and use Azure authentication instead?

Also.. is there a log I can look at to see what authentication was used?

Hope someone can help.