Making sso endpoint references consistent