excludingRoutes wont work in this case because the application opens connections to different endpoints that cant be known ahead of time. The application is using WkWebView for SAML authentication to different providers.
When you say "I would try to just use one provider here if possible" do you mean if only the app proxy was being used then app proxy with NEAppRule should work to intercept flows from Developer Id applications?
mkilburn
Users receive reputation points by contributing quality content to the forums.
Posts include post and replies published on the forums.
Post authors can mark replies as Accepted to indicate successful solutions.
Apple Developer Forums admins can mark replies as Apple Recommended to indicate an approved solution