This could be tricky since we need to moved the SSO settings from the plugin to core during the plugin upgrade process.

We also need to modify the check.php script to add additional codes to be handled by the app (probably it would be better a new field to make it backwards compatible)