Were migrating our dashboard admins to SSO and have found that deleting the local admin account to force the use of SSO, also deletes their VPN user account - didn't expect that!
The work around is to create a new user 'guest' account for the MX VPN service and email new credentials to the user. One has worked OK, the next one failed "A user with the email 'xxxxxxxxxxx' already exists". We cannot find that account anywhere. It is not in the dashboard admins or existing VPN users.
It was used for SSO so we have tried with the account in the M365 SSO user list and without. Neither makes a difference. I have seen other threads on the forum that once dashboard knows about an account in SSO, it doesn't let it go, there's no option to remove the record of it. Strange as another user SSO account allowed us to create a guest VPN without issue.
Anybody else seen this when migrating to dashboard SSO?