As the SSO is associated with an email domain, all users with a matching email will be required to use SSO, regardless of their permissions.
If having an account without SSO is a strong requirement, it is possible to create an admin with a different email domain.