You're assuming it's intentional. The first thing that comes to my mind is inconsistent state between multiple authentication servers.