@Federico Coppola , From your description, it seems we enroll iOS devices into Intune by using Apple's Automated Device Enrollment. If there's any misunderstanding, please let us know.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios
For corporate devices we usually don't assign the Company Portal app from the app store directly on ADE-enrolled devices. But we provision it through ADE as an VPP app so it will be installed after default iOS configuration. We can see more details in the following link:
https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados#ade-administrator-tasks
From my point of view, Microsoft Intune Company Portal is needed. We can deploy it as an VPP app.
Hope it can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.