Detecting SSO protocols