SSO is not enough. In secure systems you are ussually required to provide both network access, and applicative access restrictions