Session handling using MCAS and Defender for Endpoints

Hi,

we are in the process of evaluating Defender for Cloud Apps Reverse Proxy functionalities (using conditional access app controls), and one of the complaints we received from our test users, is that they would like to make sure that when they click on existing links or bookmarks that they get redirected automatically (this was expected since in agentless mode browsers can't tell that companyABC.lightining.force.com.mcas.ms and companyABC.lightning.force.com are one and the same) - does anyone know if would Defender for Endpoint would be able to assist with this? For added context, we did not make any specific changes to the SSO settings on the Salesforce side to avoid breaking the Mobile Application access).

Thanks