Do users need an invite from Orb to log in with SSO?

Yes, even with SSO (Single Sign-On) configured, users still need to be added to your Orb account before they can log in. SSO only handles the authentication process, but does not automatically provision user accounts within Orb.