Change SsoGuid to be a value object produced by SsoGuidFromSession