SSO can also be implemented in a way

Unless you're more specific, I'm going to assume that that "way" is the wrong way.

Initial login shouldn't add more latency than a couple web redirects. The authentication token/assertion should be validated only once and not be needed until it expires or the user logs out.