Navigate to your Profiles tab and click the plus sign under Available Payloads.
Make sure Android is your platform and select WiFi from payload type.
From here give your payload a name, set the SSID under Service set identifier, select if you want to auto join the network, select if the network is hidden, select your security type and if you are using a proxy.
If you choose 802.1x EAP as your security type you will be given options for Protocols, Authentication and Trust
Protocols allows you to select your EAP type and 2nd phase authentication
You set your Username, Anonymous Identity and Password as well as select an Identity Certificate under the Authentication tab.
Under the Trust tab any certificates or certificate names can be added for authentication purposes.
Back under the main WiFi payload screen you can set your Proxy.
Automatic is only supported on Android 5.0 and later, and only requires the URL of the proxy server.
Manual, which is supported by Android 4.0 and later, requires the proxy server and port as well as any bypass URL information that might be required.
Your payload will now be available for selection when creating or editing a Smart Device Profile.