@Joe Brugaletta FYSA - RoamIdentity will cause issues if you are using Intune for configuration management. The RoamIdentity setting is only designed as a workaround for customers that don't have SSO fully working. Sounds like you have it working as your issue is only with a couple of users.