Behind the Click: How SSO Works