This message was deleted.

@User might not be ideal but could you silo the app to a store and delivery group? Then use GPO to configure receiver SSO and store settings? Limited option I know but might get it done.