My staff have working accounts, but for some reason cannot log in.
Occasionally, an account needs an extra step of verification. To unblock their login, ask them to login to the online interface and go to the top right section. From there, they need to click "preferences". Afterwards, they just need to press the "save" button. This should validate their app logins.