I deal with a lot of security domains every day. It would be 10-100x more without SSO.

SSO isn't the problem. Proliferation of apps is the problem. SSO is just the glue that evidences the problem.