To enable Commerce SSO to work for a specific user, the user must have accounts for both the Business Control Center and the Workbench. Both versions of the account must have the same user name.
A system administrator is responsible for creating the accounts and ensuring they are in sync. The system does not enforce this requirement itself.