Problem with SSO
You now have to educate users to lock computer when the walk away. Otherwise, anyone will have their access if the happen to catch workstation unattended. I will not use SSO, I'd rather log in to each application/system myself.
Here SSO is being actively pushed/encouraged. All new apps MUST be SSO compatible.
A good friend will come and bail you out of jail ... but, a true friend will be sitting next to you saying, "Damn...that was fun!"