The fake login page in the Browser in the Browser attack looks very real and it is almost impossible to detect it. All you can do is avoid clicking any suspicious and be a little extra careful while using SSO.