add SSO url generation