This topic might help: Debug and fixing common DiscourseConnect issues.
The first thing you need to do is enable the verbose sso logging Site Setting and have the user try logging in again. There should be some information in the logs that tells you what the problem is.