Possible Single Sign-on errors can be viewed in the Employees - Administration - Service Log section. The service log allows filtering by desired time range and service area. Filter by SSO.
Service log field Summary defines in more detail the cause of Single-Sign error. The specific text elements (for example username) can be used to further filter the service log, by defining the Summary search criteria.