Sir, 
Controls at sso: auditor need to consider control at sso. 
Two important factors 
1) interaction
And plz explain the second one..