expose sso  in client