SAML authentication still requires a matching user account in OrangeHRM. The error typically appears when the affected employees have no user account/role created. Create user accounts for them, and the SAML sign-in will resolve.