I can sum up my usecase/needs quite easily; we have a NS webstore and an external web app - we want to make the user only need 1 login account (NS) to access both. Is this something SSO (or SAML, etc.) can do?