Finally got SSO to work by using Synology's bear bones server. Still with inconsistent references and implementation, I needed ChatGPT to guess how issues should be solved. Since this is customer facing (now including a 9 year old), I hope family members can get to use more applications like NextCloud.