Add SSO everywhere, requiring `signin` permission.