If user is having issues logging into apps the issue could be caused by a bad token. through azure AD find the user and revoke sessions usually fixes the issue.