David,
You may be running into the account being mixed up with the SAML2 version of the account. Next time you see this, can you log in with your domain credentials?
What if you create a second account manually on CAPC, one that is not named the same as your domain credentials, do you still run into the problem?
Troy