A vpn of any kind can be an issue, due to the fact they can be used to bypass our country restrictions, so many known VPN, proxy and similar are blocked due to that.
Main issue here is however that the SSO page see one ip, for sake of argument lets say it sees 127.0.0.3, it then sends a login...