[itake]

Devise doesn't support SSO, but it supports omniauth, which supports SSO, right?

You certainly can write and maintain code to add multi-tenant sso, but since omniauth does not support any configuration storage, you have to add that yourself.