Any had this issue , devices where PSSO was already registered, users were prompted again to register. When they attempted to register, the process failed, and the devices entries are removed from Azure, resulting in loss of all organization access.
we had to re-register the devices through System settings > User and Groups > Network account server > Edit, and then click repair.
Note: We use Secure Enclave as authentication type, No changes where done at profiles