let the sso could check the oathtool package