Does this happen with all the users from domain?. When the user logs in the SSO tries to fetch information of all the groups associated with the user. Some of the groups are not reachable which may result in this error. To test you can remove the user from all the group which it is a part of (except domain users and VC permission group).
Regards,
Sree