Users receive the following error message when launching Composer: "Invalid Session or your session has expired. (Lock IPs may be enabled.)" This error occurs when the "Lock IP Address" setting is enabled or when launching a non-OAuth button in Lightning.
What to Do
Disable the "Lock IP Address" setting for hosted AppExchange applications.