The problem isn’t actually with the data the SSO plugin is pulling in though, it’s with the data that the wp_login hook function is running. The email address is updated there, and from what I can tell, there aren’t any special characters. The email addresses are formatted like firstname.lastname, but that hasn’t been a problem until recently (and it’s accepting them if they are entered directly).