System should allow for SSO on customer's side if needed