SSO Not Working for Dataverse Datasource

Hello, I have a sample-report that has two datasources:

1. Dataverse (new CDS connector, DirectQuery)
2. SQL Server (via a gateway, DirectQuery)

I have enabled the SSO setting in the Dataverse credential:

However, when users access the report, they are able to see Dataverse data for which they've had their permissions revoked--implying that the SSO isn't working and that my Dataverse credential is being used.

Any suggestions? Thanks.