Devices prepared in Apple Configurator 2 keep prompting to sign into iTunes

We are enrolling our iOS devices into Intune using Apple Configurator 2. This locks down the phone and puts the Company Portal app on the decies. Once that happens, before we've downloaded any apps from the Company Portal, we get continuous prompts to sign into iTunes to allow our company to manage and install apps. However, we cannot sign into iTunes because the phones are locked down.

From looking at similar issues, others have suggested ensuring the apps we're using were purchased using a VPP. I have checked this on Intune and they do say they're "iOS volume purchase program app".

I can't figure out why we're getting this message to sign into iTunes on our prepared devices. I'm hoping someone can help.