> SSO can also be implemented in a way Unless you're more specific, I'm going to assume that that "way" is the wrong way. Initial login shouldn't add more lat

> SSO can also be implemented in a way Unless you're more specific, I'm going to assume that that "way" is the wrong way. Initial login shouldn't add more latency than a couple web redirects. The authentication token/assertion should be validated only once and not be needed until it expires or the user logs out.