Maybe move the accessor that does the User lookup to SSO::Base then?