I have two users who received the errors below.

We just enrolled into single sign-on through Azure AD. 

The users had a UPN and Email that was different. We resolved that. However, they are still unable to get into Concur through single sign on. Their concur information matches their active directory information. 

Their permissions are correct as well. 

Does anyone have an idea what could be the cause of this and how to go about resolving this?

Thank you