This issue only needs to be tested in 1 device (you can use browser). This issue requires you to generate a build with a fixed URL, so it should be tested by a dev. Run the app with a fixed URL set (use the URL of the BMA specified in the restricted comments). If needed, click to add a new site (if you don't have any site stored then there's no need). The site is configured to use SSO, so close the IAB or go back to the app if it opened the system browser. If the app has been killed, try a different SO (either Android or iOS kill the app when opening system browser, use the other one then). Check that there is no icon displayed in the OAuth buttons.