SSO with Microsoft - Excluding Users

Thanks in advance!

I configured Zoom SSO with Microsoft Azure/Entra. It's working - however I need to exclude a couple of users from the SSO requirement.

I've turned ON Advanced / Security / Sign-in Methods / "Allow users to sign in with Single Sign-On (SSO)" and added the two users who can bypass SSO sign-in.

When I turn OFF "Allow users to sign in with work email", those two users are prohibited from using their email/password credentials using this login link... https://zoom.us/signin#/login - I get this error message: "Unable to sign into your account. Please try the other listed methods."

If I turn "Allow users to sign in with Single Sign-On (SSO)" ON, it permits ALL users to use the email/password credentials.

What am I missing?