If you get an error code caa20004 when attempting a first-time login, then you need to enable WS-Trust 1.3 for Desktop Client SSO.