We need Koha to be able to work with Central Authentication Service as an SSO solution; see cpan AuthCAS (maybe)