Sso Check

SSO domain endpoint. Checks if the SSO session has a valid customer_token.

• If authenticated: create one-time token -> redirect to {origin}/sso/callback
• If not: redirect to SSO login page with redirect_to={origin}{return_to}