No DevicePlatform provided but required by Conditional Access Rules

Steps to reproduce

1. Install and setup user_saml extension. (Requires Azure-AD and Conditional Access Rules blocking unspecified OS)
2. Try to login via iOS App
3. If CA-Rules block "undefinded OS", the login is blocked. Since the OS is iOS it should not be blocked (in our environment)

Expected behaviour

The device platform should be recognized by Microsoft and the login should succeed.

Actual behaviour

The app does not provide the device platform on iOS. Our Security Concept blocks all Logins other than from iOS and Windows.
A login via the Safari Browser does work, so a device platform is correcty provided by Safari.

Screenshots

Reasoning or why should it be changed/implemented?

The device platform should be provided, in case you want to block (un)specific platforms via CA-Rules.

Environment data

iOS version: iOS 16.4

Nextcloud iOS app version: 4.7.0.23

Server operating system: Rhel 8

Web server: Apache

Database: MariaDB

PHP version: 8.1.16

Nextcloud version: 25.0.4

Start by reproducing the iOS app login with Azure AD Conditional Access Rules that block unspecified operating systems, then compare it with the working Safari login. Trace the authentication request and verify that the device platform is provided as iOS; done means the same Conditional Access policy allows the app login.