One of our user has outdated SSO

The user can log in, but SSO renewal returns an outdated token.
Hence he gets disconnected right after a SSO check.

In the manager, the # of logins don’t match in the users list or the user details :

![alt text][1]

![alt text][2]

We are using an external database for the connection.

Any idea ?