I have app1, app2, app3 and a user should be able to login via a single-sign-on (auth.example.com) in order to be authenticated for each of app1, app2, app3