https://www.planetjon.net/news/cybersecurity/where-sso-falls-short-in-protecting-saas/