For this you will need a valid qv-session and it will be require a login or SSO. But even by SSO I'm not sure if it will work in your way that a session will be started and then a redirect goes to your app. But perhaps there are settings for this ... maybe Bill Britt could help.
Thanks Marcus, that does make sense with what I'm seeing - i.e. if the SSO session is setup by navigating to the AccessPoint then the URL works, but otherwise not.
I'm hoping there are settings for this (although I've looked everywhere I can in the QMC). Just basing this on someone that managed a QVS installation in another organisation that said it could be done (not managed in a technical sense so I have no details)?!