support for Keychain SSO