Single Sign-On Error - requires password change

[mwu1876]

I have SSO working fine but it's requiring everyone to change their Office 365 password (even if it's a new user) when they first enroll. Not sure how to stop it. I've checked all the settings but maybe I didn't configure something.