Issue is similar to this:

Runtime\Runtime configuration for web calls does not pass on device ID to Azure IDp.

The Device ID field needs to be passed to SSO so that it's compliant with device based conditional access policies in Azure.