Another possibility is the mobile client losing affinity with the same IdP server behind a load balancer, which could be a similar cookie bug on the part of the client, or a problem with a load balancer. -- Scott