is this person regularly logging into the system? It's possible they may have had their account set up with the email activation but they haven't yet activated (or their password has been superceded by SAML authentication).