To flexibly accommodate the specifications of linked services, it is now possible to configure the mobile app to use an external browser during single sign-on.
This allows single sign-on to work even when the browser used for IdP authentication in services such as Microsoft Intune is restricted to an external browser.
Details:What does "Use an external browser for single sign-on in the mobile app" mean?