I work at a place that has banned the use of SSO because it allows an attacker to compromise one set of credentials and have access to everything. Good times
And even with SSO, your credentials don't have access to everything, because no one employee should have access to everything. People should only have access to the IM channels, git repos, etc that they are actually involved with. Admin accounts and especially critical systems should be set up to require separate/additional authentication.