In our slow quest to improve our docs in general, and our SSO docs specifically, I've taken a stab at writing an information page about SSO in general, and how ProxyConnect works in particular.
VanillaConnect (for our hosted clients) will follow in short order.