The solution for my problem was:
- Admin → Settings → enable verbose SSO logging
- Navigate to /logs on one screen while attempting to login on the other
This found the problem, then…
- Delete existing account (non-sso) with the same email address
- Reattempt SSO login