code: public Credential getSingleSignOn(HttpRequest request,
                                        HttpResponse response)
      {
          if (_ssoRealm!=null)
              return _ssoRealm.getSingleSignOn(request,response);
          return null;
      }
docs: /* ------------------------------------------------------------