I was tasked to implement SSO. I was quite terrified, because I am working on legacy project where everything is implemented poorly. After series of question I finally found out that client's image of sso is just connecting to another db to validate against user table. I felt relieved :D