Access problems.

Provider rejects the address

The domain isn't verified, or the account is outside the allowed group.

Sign-in loop

Clear the cookie for this host and retry once; persistent loops are a stale IdP session.