Hi Michael,
The Genesys Cloud UI iframes 3rd party applications, like the Textel sidebar widget. Those iframed applications have to authenticate to Genesys Cloud using OAuth which provides them with an access token that will expire, at which time they will need to re-authenticate to get a new access token.
What I imagine is happening is that the access token is expiring and so the application is directing to the Genesys login screen for the agent to re-authenticate. If you are using SSO the agent may have to click on the "More Login Options..." link and enter the org name. Once they do that they will be taken back to the panel with the username/password prompt, but they should also see an option to login using your SSO provider. They should be able to click the SSO link and it will probably pick up their SSO login without prompting them for the SSO credentials.
I hope that helps.
------------------------------
Jim Crespino
Senior Director, Developer Evangelism
Genesys
https://developer.genesys.com------------------------------