Managing applications through Configuration Manager in Intune
The user must have a hybrid AAD identity for user targeting to work on Internet based clients. See https://learn.microsoft.com/en-us/mem/configmgr/core/clients/manage/cmg/plan-client-authentication#azure-ad for some additional detail on this.