Nice! Would just improve the 'StartSSOAuthentication' implementation. It unnecessarily calls a server action 'GetToken' to just do a couple of string splits. This could easily be done client side, saving a round trip to the server.