@jscholes@andrew Cosmos is an openid provider, so apps that support SSO integrate that way. The cosmos reverse proxy also passes authentication headers, and some apps support that. Worst case scenario cosmos can be configured to require authentication before proxying particular urls.