After giving this some more thought, I'm wondering if this solution is going to solve the issue I thought it was going to solve. Am I understanding this correctly in that instead of requiring the user to open Company Portal and sign in (and thus register), the new feature is just allowing ANY "configured or allowed" app to perform this flow. The user still needs to open and sign into ONE of these apps, correct?
We unfortunately have some users who do not use any of the MS apps on their phones (we don't force Authenticator or any apps yet) which means some users who have corporate devices, although supervised, aren't registered (Primary User is stuck at None). And as far as I can tell, the timeout that happens when a user waits too long to open the app and when they do, cannot enroll is still present.
It would be amazing if the whole process could be performed from the initial OOBE sign-in process.