This topic might help: Debugging and fixing common SSO issues.
The first thing you need to do is enable the verbose sso logging Site Setting and have the user try logging in again. There should be some information in the logs that tells you what the problem is.