I'm sure Mimecast can handle implementing some SSO special sauce for you - you'll get an experience that's more seamless than present *and* doesn't train your customers to be easy prey