Salesforce now requires MFA validation for all SSO users. Please read the advisory below for further information on required actions to avoid login failures.
Users become deleted from Cloud Admin console and are not resynchronized in the next sync of the Cloud Authentication Service.
Cause
This is is caused by a missing attribute in the Active Directory source. In this particular case, the email address was missing from Active Directory. Email was one of the Synchronize User Attributes, as shown below.
Resolution
Note the list of users in the first screen shot above. In this case, Wilma Flintstone. That user was missing an email address in Active Directory. The solution is to correct the entry in Active Directory to include an email address.
