Does Google have good SSO internally? Or Facebook?
(excluding things like administration of organization-wide infrastructure key material)