With Intune / SCCM Hybrid, after upgrading SCCM to CB 1702, you might see the following error.

Android for Work shows its status as failed. Even though your bindings are OK in the Intune console.

It appears that even though Intune portal shows the status as OK, you still need to approve apps from the Play for Work store, to get SCCM console show the status properly.

After approving apps from the Play for Work store, also the SCCM console synced the status properly.