There could be a few different reasons why this is happening (open a support ticket if troubleshooting is not getting you anywhere).
I would check to make sure that the user has a third-party contact record/user record with the correct external vendor portal role.
If they have a user record, you could try to resend their initial notification with the login details.
