[pabs3]

SSO using TLS client certificates would be ideal if the support for it in browsers wasn't so terrible. The UI is bad, support isn't universal, features (like <keygen>) keep getting dropped etc.