In SSO enabled mode, you can sign in with a password. When a user's password expires, they are forced to change their password. If you try to sign in with SSO in this situation, you will be redirected indefinitely and you will not be able to sign in.

In this case, Box should redirect to the password change page after accepting the authentication.