Company Portal - missing ConfigMgr apps deployed to users

[HLJ]

I'm having an issue with company portal only showing some of the apps deployed from ConfigMgr (Intune apps show up fine). 
On a closer look, apps assigned to device collections shows up in both software center and in company portal while apps assigned to users only show up in software center. 
This issue only occurs while I am on-prem and only on hybrid joined devcies. If I move the device to an Internet connection or force the client into alwaysOnInternet via the registry (or use a co-managed Entra ID joined device) all apps show up in Company Portal. 
I tried a few different types of deployments; packages, applications, custom, msi, weblinks, deployed as required, deployed as available -no difference noted. 

Is this the expected behaviour? I'm seeing this both in a prod environment and in lab

Setup (both in prod and lab):

ConfigMgr 2403
Entra ID hybrid joined devices
CMG in place
Client apps workload moved to Intune
Client setting deployed to use company portal instead of Software Center
User / device allowed to retrieve policies from Internet
MP allows CMG traffic
ConfigMgr in HTTPS only mode
policyAgent.log shows device recieving user and device policies
Win10 (22H2) and Win11 (23H2) clients