Syncing marketo to sfdc without security token

Has anyone else been in a situation where their SFDC org uses SSO, so the security token isn't present? I tried enabling the sync between Marketo and SFDC and it worked at first just using a password and username for the Marketo user, but it failed after importing the first 20,000 leads. 

Anyone have a workaround for this?