What i believe you can do this
WIthout enrollment code you can enroll the device by sending the url on mail ,
SSP will helo to enroll the device but again ssp required tiny url for enrollment code.
For connectivity without public network you can use wifi connection or VPN connection on device with this you can enroll the device with private ip address of the network
