It would be really nice if SSO could be easily mocked to allow for local testing without needing credentials, similarly to how LDAP was mocked in #216, though at first glance I suspect SSO will be more involved.