Thanks for the reply. It took a while, but a policy was added for associated domains and the behavior is the same as before.

A screenshot of the policy is available here: https://drive.proton.me/urls/A8Q36S6MTW#9aydzTWVjRS5

My company requires devices be managed by Intune and does not allow authentication with our accounts on non-managed devices. When I try to connect to the company VPN with Viscosity, the authentication fails because it doesn't see the device as managed. Authentication is performed against Microsoft ...