If these internal apps use a corporate certificate, I would imagine their Apple ID needs to be on a company domain email in order to download/use the app?