Currently SSO works only with the Canny Widget. However, the Widget lacks the full feature set of the Portal, and requires more work to set up.
I imagine this could work similarly to the current SSO flow, except a user might be redirected to something like: