Clarify the two 'origin site' lookups in the SSO script.