MVSP - 2.1 Single Sign On

[cmlh]

"2.1 Single Sign-On" of MVSP is reproduced below:

2.1 Single Sign-On
Implement single sign-on using modern and industry standard protocols

The parent of this issue is #1151.

[cmlh]

V2.7 Out of Band Verifier refers to "Single Sign-On" in the paragraph quoted below:

The ASVS assumes that only a few developers will be developing new out of band authenticators, such as push notifications, and thus the following ASVS controls apply to verifiers, such as authentication API, applications, and single sign-on implementations. If developing a new out of band authenticator, please refer to NIST SP 800-63B § 5.1.3.1.

FYI @jmanico