iPad 9th Gen asks for passcode after enrolling into Intune but no passcode set

We are enrolling iPad 9th gen into Intune. We've set up an enrollment profile (shared device, enrolled without user affinity) and Intune has provided a default iPad/IOS compliance profile.

When the iPad enrolls, it shows a login screen but once the user types in their federated user id, it requests a passcode. No passcode has been set at any point, although the enrollment profile requires a min 4 digit numeric passcode to be set.

It allows access via guest account but the option to set / change passcode is not visible and I am unable to access account settings/apple id or the app store.

Where am I going wrong!