I\'m using mod_mellon for a few years, combining it with simplesamlphp as idp. That combination provides SSO for several subdomains.
I included privacyIdea as a second fa