The SSO domain has nothing to do with box_domain