Hi @jereloh
The easiest way is to use the Auth Code flow - open the full system web browser on the mobile app, and then SSO just works. The session is stored in a cookie, and since you are using the full system web browser, that cookie can be accessed by both the mobile app and web app.
There are other ways but they are either very difficult or very insecure.
John