That's if you're implementing SSO on your own, which most folks don't do. Most SaaS using SSO in their apps will use Auth0 or Okta. Dropping third-party cookies has implications for these integrations:
https://support.okta.com/help/s/article/FAQ-How-Blocking-Thi...