another feature that might be to your advantage in connecting the no popup devices, is to make each client authenthication last longer than the default, for instance 1 hour or more, its unlikely in most use cases that a mobile (as in roaming) user will stick around that long, and if they do, they just have to log in again when their session expire.