Portal will have a method for sharing data between apps, but it's not there yet. For authentication, apps can run an HTTP server on a special port, which will be proxied to the user pre-authenticated. That might change before launch, but it's fairly simple.

In the case of apps that publish public URLs (like WordPress) they can choose to use Portal's single sign on or not.