Among others, long-lasting active SSO session can cause accounts not to reset their passwords. Users will fail this check if they have not reset their password for 180 days.
Recommended Actions
We recommend enforcing a password reset for these users.