Hi Chris,
I would like to confirm if it works when accessing mail.office365.com. If so, I can say the SSO function is fine. Given the situation, I suggest adding the following addresses into the trust site in IE.
https://domain.sharepoint.com
https://*.microsoftonline.com
Thanks,
Johnny Zhang