@SwiftOnSecurity SSO is one of those terms where the someone said “easier for users” but the business heard “easy to implement” and therefore dispensed with architecture and planning. It then follows that it gets deployed unevenly, incompletely,with wildly different user experiences across heterogenous, hybrid and legacy apps and auth proxies until IT just throws their hands up. It takes a lot of planning and communication to make SSO work well past a few apps.