https://wp.jochen.hayek.name/blog-en/2011/08/31/atlassian-crowd-single-sign-on-identity-management/