I was overzealous with the annotations requiring authentication. I tested with only index requiring authentication and it routes through sso correctly.
fixing conflicts