I’ve built an app for a client where the users have to authenticate via SSO on startup. This is done via an Android WebView, showing the SSO login screen, letting the user log in, saving all the cookies into a shared cookie jar and returning to the app.