Single sign-on moves to the cloud