Halted SSO retry for request - meaning

I have an APM protected SP2013 farm that was working via KCD SSO until very recently. No changes were done on the F5 side, but I suspect a GPO push was rolled out. I can see the F5 getting a TGT and ...