user cannot login with SSO. Their employee record email address has a different domain in the email than the standard employees who have access. What do I need to do to grant them access to login with SSO

AI generated answer (using internal Slack threads):

Based on the conversations, it seems like the issue might be due to a mismatch between the email address in the employee record and the email address used for Single Sign-On (SSO). Here are the steps you can take to resolve this issue: 1. Check the Email Address in the Employee Record: Ensure that the email address in the employee record matches the email address used for SSO. If they don't match, update the email address in the employee record to match the SSO email address. 2. Check the Email Address in the SSO Provider: If you're using an external SSO provider like Okta, ensure that the email address in the SSO provider matches the email address in the employee record. Sometimes, the email address in the SSO provider might be set to a different domain, causing a mismatch. 3. Check the SSO Permission in the Role: If the user is able to log in with an administrator role but not with any other role, it might be due to a permission called SSO in the role. If this permission is restricting the user, you can remove it to allow the user to log in with SSO. Remember to always double-check the email addresses and permissions to ensure they're correct. If the issue persists, you might need to investigate further or consider other potential causes. ****** Disclaimer: This response was generated by an artificial intelligence assistant based on previous conversations from multiple Slack channels, and may contain inaccuracies or mistakes. ******