When an SSO organization adds additional users, a common missed step is adding the correct security group (to allow users to access Thoropass).
The error below is an example of a user who has not been added to a group with Thoropass access:
Please contact your internal applications administrator to be added to the group.