I don’t have a solution, but I seem to remember this exact issue having come up a few times in the past. It’s unfortunate that you can’t make the users moderators and give them access to the site via the /u/admin-login route.
In case it’s relevant, what are you using for SSO? Is it DiscourseConnect, OAuth2, or OpenID Connect?