I was able to resolve this issue by configuring the MDM policy to allow access to our managed app via the universal link. This requires a policy change on the MDM side.