Don’t write a new SSO system (if you can help it)