Go to Settings > Workstation Settings > Windows Settings and select the Endpoint left menu.
Select the UAC tab and the Multi-factor Authentication option:
Set Email match to Off and click Save.
Users can have email addresses that are different from their user accounts. This is to prevent the error message that can occur when requests for elevation are approved: "Single Sign-on Error: Email addresses do not match".
To configure this in the portal:
Go to Settings > Workstation Settings > Windows Settings and select the Endpoint left menu.
Select the UAC tab and the Multi-factor Authentication option:
Set Email match to Off and click Save.