Just in case anyone else stumbles across this issue….
Wasn’t down to just CE based devices. This functionality isn’t possible with full PN. Need to be utilising PNAgent or WI. Our laptops are setup to use pass-through authentication which is why it works there and over CAG.