With SSO through the browser, you have apparently opened up a whole new can of worms with whatever browser settings, popup blockers, cookie blockers, Pi-Holes, possibly outdated browsers and whatever it is that people seem to have (and sometimes without being aware of it / thinking of it, or its consequences)
Perhaps you are planning this for SSO anyway, but maybe it would help if the SSO allowed signing in with Apple, Google, etc. accounts like so many other services do.
Alternatively or in addition, maybe some helpful hints on the browser login page regarding these possible obstacles? I suppose it can know if it can’t connect…
You/support are aware of the cases, but just some examples where it was sometimes really painful for users. So anything that may make it easier for users would help, I suppose.
It took the user 20 days (13 for me after Roon staff had disappeared) and overall 70 posts in the thread to log into ARC in that first thread (including some diversions/confusions but that’s what happens):