If there are Active Directory users who do not use SSO, remove those users from the security group specified as the sync condition for TrustLogin in Active Directory.
< Reference > Setup Step 2: User Sync Settings [Performed in the TrustLogin Admin Page]